CVE-2017-8205

High

Published: 22/11/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has an integer overflow vulnerability due to the lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privileges, allowing arbitrary code execution.

Risk Assessment

This vulnerability poses a risk of arbitrary code execution on the device, potentially leading to data loss or complete control of the device by the attacker.

Recommendation

It is recommended to update the software to version Stanford-AL10C00B175 or later to mitigate this vulnerability. Users should also avoid installing apps from unknown sources.

Other vulnerabilities in Sterownik Bastet w smartfonach Honor 9

CVE-2017-8204High
The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution.

Original NVD description (English source)

The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has integer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS