high7.8
CVE-2017-8169
Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation.
Impact
Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone, causing the smartphone restart or arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Vie-L09 Firmware | before vie-l09c40b360 |