CVE-2017-17324

Name of the Vulnerable Software and Affected Versions: Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229

Description: The issue is related to an integer overflow in the camera driver, which does not properly validate external input parameters. This leads to a buffer overflow after processing, potentially allowing malicious code execution if an attacker tricks a user into installing a crafted application.

Recommendations: For Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D, consider disabling the camera driver until a patch is available. For Huawei Mate 9 Pro smartphones with software LON-AL00BC00B229, consider disabling the camera driver until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.