CVE Feed

    Dashboard / CVE / CVE-2017-8208

    CVE-2017-8208

    The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution.

    Published:Nov 22, 2017
    Last Modified:Apr 20, 2025
    EPS:Nov 22, 2017
    EPSS Score:0.00177
    CVSS Score:7.8

    Affected Products

    Vendor
    Huawei
    Product
    Honor 5c
    Vendor
    Huawei
    Product
    Honor 5c Firmware
    Vendor
    Huawei
    Product
    Honor 6x
    Vendor
    Huawei
    Product
    Honor 6x Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2017-2697 (CVSS 7.8) — The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions,NEM-L51C432B…
    CVE-2017-8207 (CVSS 7.8) — The driver of honor 5C, honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, v…
    CVE-2017-8143 (CVSS 5.5) — Wi-Fi driver of Honor 5C and P9 Lite Huawei smart phones with software versions earlier than NEM-L21C432B351 a…
    CVE-2017-8210 (CVSS 7.8) — The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, ve…
    CVE-2017-8211 (CVSS 7.8) — The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, ve…
    CVE-2017-8212 (CVSS 7.8) — The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, ve…
    CVE-2017-8209 (CVSS 7.8) — The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, ve…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High