Skip to content
OpenAdvisories
Unscored CVE-2017-8205 EUVD-2017-17167GHSA-j73q-5hm5-fm27

The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has integer overflow vulnerabi…

Published Nov 22, 2017 · Updated Sep 16, 2024 · Assigned by huawei

Description

The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has integer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution.

Affected products

VendorProductAffectedFixed
Huawei Technologies Honor 9 Versions earlier than Stanford-AL10C00B175 —

References