CVE-2017-2697

Published: Nov 22, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions,NEM-L51C432B120 and earlier versions,KNT-AL10C746B160 and earlier versions,VNS-L21C185B142 and earlier versions,CAM-L21C10B130 and earlier versions,CAM-L21C185B141 and earlier versions has buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or escalate privilege.

Affected (6)

Products: Huawei: Gt3 Firmware, Knt Firmware, P9 Lite Firmware, Y6ii Firmware, Honor 5c Firmware

5 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Gt3 Firmware	Up to nmo-l31c432b120

Running on/with	Platform Versions
Huawei Gt3	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Knt Firmware	Up to knt-al10c746b160

Running on/with	Platform Versions
Huawei Knt	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P9 Lite Firmware	Up to vns-l21c185b142

Running on/with	Platform Versions
Huawei P9 Lite	All versions

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Y6ii Firmware	Up to cam-l21c10b130

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Honor 5c Firmware	Up to nem-l51c432b120

Running on/with	Platform Versions
Huawei Honor 5c	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Y6ii Firmware	Up to cam-l21c185b141

Running on/with	Platform Versions
Huawei Y6ii	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170208-02-smartphone-en

Source: psirt@huawei.com

Vendor Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170208-02-smartphone-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.