CVE-2017-8169

High

Published: 22/11/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Huawei smartphones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privileges, which can lead to smartphone restart or arbitrary code execution.

Risk Assessment

This vulnerability poses a risk to users who may be tricked into installing malicious software, potentially leading to data loss or device takeover.

Recommendation

It is recommended to update Huawei smartphones to the latest software version to mitigate the risk associated with this vulnerability.

Other vulnerabilities in Smartfony Huawei z oprogramowaniem wcześniejszym niż VIE-L09C40B360

CVE-2017-8170High
Huawei smartphones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privileges, potentially leading to smartphone restart or arbitrary code execution.

Original NVD description (English source)

Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone, causing the smartphone restart or arbitrary code execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS