Security Advisory

CVE-2017-8205

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-11-22 19:00:00
Last updated 2024-09-16 19:09:16
Assigner huawei
CVSS score not scored
State PUBLISHED

Description

The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has integer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution.