Vulnerability Bulletins

CVE-2017-8205

   
Affected software HUAWEI
 
The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has integer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2017-8205