Security Advisory - Buffer overflow Vulnerability in Bastet Driver of Huawei Smart Phone

The Bastet driver of some Huawei smart phones has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution.(Vulnerability ID: HWPSIRT-2017-07091)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2017-8204.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link: <http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170914-01-smartphone-en&gt;