CVE-2017-8170

High

Published: 22/11/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Huawei smartphones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privileges, potentially leading to smartphone restart or arbitrary code execution.

Risk Assessment

This vulnerability poses a serious risk to users as it allows attackers to gain control over the device. It may lead to data loss or privacy breaches.

Recommendation

It is recommended to update Huawei smartphones to version VIE-L09C40B360 or later to mitigate this vulnerability. Users should also avoid installing apps from unknown sources.

Other vulnerabilities in Smartfony Huawei z oprogramowaniem wcześniejszym niż VIE-L09C40B360

CVE-2017-8169High
Huawei smartphones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privileges, which can lead to smartphone restart or arbitrary code execution.

Original NVD description (English source)

Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone, causing the smartphone restart or arbitrary code execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS