QwikSec

Security Database

CVE

CWE

Training

CVE-2017-8204

Published: Nov 22, 2017

Modified: Sep 17, 2024

PUBLISHED

Description

The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution

Vendor	Product	Versions
Huawei Technologies Co., Ltd.	Honor 9	affected `Versions earlier than Stanford-AL10C00B175`

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170914-01-smartphone-en

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.