PT-2017-18185

CVE-2017-8180

·

Published

2017-11-22

·

Updated

2017-12-08

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Huawei smart phones with software versions earlier than Nice-AL00C00B155
Description The issue is related to a buffer overflow vulnerability in the camera driver of the MTK platform. It occurs due to insufficient input verification, allowing an attacker to trick a user into installing a malicious application with special privileges. This application can send a specific parameter to the smartphone's driver, resulting in privilege escalation.
Recommendations For versions earlier than Nice-AL00C00B155, update to a version that includes the fix for this issue to prevent privilege escalation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾