CVE-2017-8179
HIGHHuawei MTK Platform Smart Phone Firmware < Nice-AL00C00B155 - Buffer Overflow in Camera Driver
Title source: llmDescription
The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends a specific parameter to the driver of the smart phone, causing privilege escalation.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170919-01-mtk-en
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/101956
Scores
CVSS v3
7.8
EPSS
0.0011
EPSS Percentile
29.5%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
Status
published
Products (2)
huawei/mtk_platform_smart_phone_firmware
< nice-al00c00b155
Huawei Technologies Co., Ltd./Nice-AL00
Versions earlier than Nice-AL00C00B155
Published
Nov 22, 2017
Tracked Since
Feb 18, 2026