Vulnerability Description
The camerafs driver in Mate 9 Versions earlier than MHA-AL00BC00B173 has buffer overflow vulnerability. An attacker tricks a user into installing a malicious application which has the system privilege of the Android system and sends a specific parameter to the driver of the smart phone, causing a system crash or privilege escalation.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Mate 9 Firmware | < mha-al00bc00b173 |
| Huawei | Mate 9 | - |
Related Weaknesses (CWE)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170426-02-smartphVendor Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170426-02-smartphVendor Advisory
FAQ
What is CVE-2017-2716?
CVE-2017-2716 is a vulnerability with a CVSS score of 7.8 (HIGH). The camerafs driver in Mate 9 Versions earlier than MHA-AL00BC00B173 has buffer overflow vulnerability. An attacker tricks a user into installing a malicious application which has the system privilege...
How severe is CVE-2017-2716?
CVE-2017-2716 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-2716?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Mate 9 Firmware, Huawei Mate 9.