CVE Catalog

CVE-2017-8181

High
Published: Translated: NVD NIST

Summary

The camera driver on the MTK platform in Huawei smartphones with software versions earlier than Nice-AL00C00B155 has an arbitrary memory write vulnerability. Due to insufficient input verification, an attacker can trick a user into installing a malicious application, leading to privilege escalation.

Risk Assessment

This vulnerability could allow an attacker to gain elevated privileges on the system, posing a serious threat to user data security and device integrity.

Recommendation

It is recommended to update the software to version Nice-AL00C00B155 or later to mitigate this vulnerability. Additionally, users should exercise caution when installing applications from unknown sources.

Other vulnerabilities in Sterownik kamery na platformie MTK

Original NVD description (English source)

The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a arbitrary memory write vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends a specific parameter to the driver of the smart phone, causing privilege escalation.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS