CVE-2017-2729
HIGHHonor 5A Firmware < CAM-TL00C01B193 - Authenticated Buffer Overflow via Malicious APP Installation
Title source: llmDescription
The boot loaders in Honor 5A smart phones with software Versions earlier than CAM-TL00C01B193,Versions earlier than CAM-TL00HC00B193,Versions earlier than CAM-UL00C00B193 have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170302-01-smartphone-en
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/96526
Scores
CVSS v3
7.8
EPSS
0.0017
EPSS Percentile
37.8%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
Status
published
Products (3)
huawei/honor_5a_firmware
< cam-tl00c01b193
huawei/p8_lite_firmware
< ale-l02c635b568
Huawei Technologies Co., Ltd./Honor 5A
Versions earlier than CAM-TL00C01B193,Versions earlier than CAM-TL00HC00B193,Versions earlier than C
Published
Nov 22, 2017
Tracked Since
Feb 18, 2026