CVE-2017-8202 Information

Description

The CameraISP driver of some Huawei smart phones with software of versions earlier than Prague-AL00AC00B205versions earlier than Prague-AL00BC00B205versions earlier than Prague-AL00CC00B205versions earlier than Prague-TL00AC01B205versions earlier than Prague-TL10AC01B205 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP the APP can send a specific parameter to the CameraISP driver of the smart phone causing system reboot.

CVSS Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Reference

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-smartphone-en http://www.securityfocus.com/bid/101959

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

REQUIRED

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

NONE

Base Score

HIGH

Base Severity

5.5