Back to feed
EUVD-2017-17164 · Published Nov 22, 2017
The CameraISP driver of some Huawei smart phones with software of versions earlier than Prague-AL00AC00B205,versions earlier than Prague-AL00BC00B205,versions earlier than Prague-AL00CC00B205,versions earlier than Prague-TL00AC01B205,versions earlier than Prague-TL10AC01B205 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP, the APP can send a specific parameter to the CameraISP driver of the smart phone, causing system reboot.
Technologies
Huawei Prague-Tl00A FirmwareHuawei Prague-Al00AHuawei Prague-Al00B FirmwareHuawei Prague-Tl10A FirmwareHuawei Prague-Tl10AHuawei Prague-Tl00AHuawei Prague-Al00CHuawei Prague-Al00A FirmwareHuawei Prague-Al00BHuawei Prague-Al00C Firmware
Weaknesses
CWE-119
CVSS scores
- v3.05.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - v2.07.1
AV:N/AC:M/Au:N/C:N/I:N/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
