Vulnerability Description
The CameraISP driver of some Huawei smart phones with software of versions earlier than Prague-AL00AC00B205,versions earlier than Prague-AL00BC00B205,versions earlier than Prague-AL00CC00B205,versions earlier than Prague-TL00AC01B205,versions earlier than Prague-TL10AC01B205 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP, the APP can send a specific parameter to the CameraISP driver of the smart phone, causing system reboot.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Prague-Al00A Firmware | < prague-al00ac00b205 |
| Huawei | Prague-Al00A | - |
| Huawei | Prague-Al00B Firmware | < prague-al00bc00b205 |
| Huawei | Prague-Al00B | - |
| Huawei | Prague-Al00C Firmware | < prague-al00cc00b205 |
| Huawei | Prague-Al00C | - |
| Huawei | Prague-Tl00A Firmware | < prague-tl00ac01b205 |
| Huawei | Prague-Tl00A | - |
| Huawei | Prague-Tl10A Firmware | < prague-tl10ac01b205 |
| Huawei | Prague-Tl10A | - |
Related Weaknesses (CWE)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-smartphVendor Advisory
- http://www.securityfocus.com/bid/101959Third Party AdvisoryVDB Entry
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-smartphVendor Advisory
- http://www.securityfocus.com/bid/101959Third Party AdvisoryVDB Entry
FAQ
What is CVE-2017-8202?
CVE-2017-8202 is a vulnerability with a CVSS score of 5.5 (MEDIUM). The CameraISP driver of some Huawei smart phones with software of versions earlier than Prague-AL00AC00B205,versions earlier than Prague-AL00BC00B205,versions earlier than Prague-AL00CC00B205,versions...
How severe is CVE-2017-8202?
CVE-2017-8202 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-8202?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Prague-Al00A Firmware, Huawei Prague-Al00A, Huawei Prague-Al00B Firmware, Huawei Prague-Al00B, Huawei Prague-Al00C Firmware.