CVE-2017-8204
HighSummary
The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution.
Risk Assessment
This vulnerability may lead to the takeover of the device by malicious software, posing a serious threat to user data and system security.
Recommendation
It is recommended to update the software to version Stanford-AL10C00B175 or later to mitigate this vulnerability. Users should also avoid installing applications from unknown sources.
Other vulnerabilities in Sterownik Bastet w smartfonach Honor 9
Original NVD description (English source)
The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution
Vulnerability data from NVD (NIST) · CISA KEV · EPSS