CVE-2017-17324

N/A

Description

Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer overflow vulnerability. The camera driver does not validate the external input parameters and causes an integer overflow, which in the after processing results in a buffer overflow. An attacker tricks the user to install a crafted application, successful exploit could cause malicious code execution.

CVE Details

CVSS v3.1 ScoreN/A

Published3/9/2018

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

huawei:mate_9_prohuawei:mate_9_pro_firmware

Weaknesses (CWE)

CWE-190

References

http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180124-01-smartphone-en(psirt@huawei.com)

http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180124-01-smartphone-en(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.