High severity7.8NVD Advisory· Published Nov 22, 2017· Updated May 13, 2026
CVE-2017-8170
CVE-2017-8170
Description
Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone, causing the smartphone restart or arbitrary code execution.
Affected products
2- Huawei Technologies Co., Ltd./VIE-L09v5Range: Earlier than VIE-L09C40B360 versions
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.huawei.com/en/psirt/security-advisories/huawei-sa-20171025-01-overflow-ennvdIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.