← Back

CVE-2017-8202

nvd nist
Published: Nov 22, 2017Modified: May 13, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

The CameraISP driver of some Huawei smart phones with software of versions earlier than Prague-AL00AC00B205,versions earlier than Prague-AL00BC00B205,versions earlier than Prague-AL00CC00B205,versions earlier than Prague-TL00AC01B205,versions earlier than Prague-TL10AC01B205 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP, the APP can send a specific parameter to the CameraISP driver of the smart phone, causing system reboot.

Affected (5)

Huawei
5 products
Prague Al00a Firmware
Prague Al00b Firmware
Prague Al00c Firmware
Prague Tl00a Firmware
Prague Tl10a Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Prague Al00a Firmware
Before prague-al00ac00b205
Running on/withPlatform Versions
Huawei
Prague Al00a
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Prague Al00b Firmware
Before prague-al00bc00b205
Running on/withPlatform Versions
Huawei
Prague Al00b
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Prague Al00c Firmware
Before prague-al00cc00b205
Running on/withPlatform Versions
Huawei
Prague Al00c
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Prague Tl00a Firmware
Before prague-tl00ac01b205
Running on/withPlatform Versions
Huawei
Prague Tl00a
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Prague Tl10a Firmware
Before prague-tl10ac01b205
Running on/withPlatform Versions
Huawei
Prague Tl10a
All versions

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (4)

Source: psirt@huawei.com
Vendor Advisory
Source: psirt@huawei.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.