VULNERABILITY INTELLIGENCE

CVE-2017-17324

CVSS score7.8 HIGH
EPSS probability0.89%
CISA KEVNot currently listed
Published2018-03-09
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer overflow vulnerability. The camera driver does not validate the external input parameters and causes an integer overflow, which in the after processing results in a buffer overflow. An attacker tricks the user to install a crafted application, successful exploit could cause malicious code execution.

Weakness classification

  • CWE-190: Integer Overflow or Wraparound

Primary references