Buffer overflow

2017-11-2219:29:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.8%

JSON

The CameraISP driver of some Huawei smart phones with software of versions earlier than Prague-AL00AC00B205,versions earlier than Prague-AL00BC00B205,versions earlier than Prague-AL00CC00B205,versions earlier than Prague-TL00AC01B205,versions earlier than Prague-TL10AC01B205 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP, the APP can send a specific parameter to the CameraISP driver of the smart phone, causing system reboot.

CPENameOperatorVersion
prague-al00a_firmwareeq< prague-al0ac0b205
prague-al00b_firmwareeq< prague-al0bc0b205
prague-al00c_firmwareeq< prague-al0cc0b205
prague-tl00a_firmwareeq< prague-tl0ac1b205
prague-tl10a_firmwareeq< prague-tl10ac1b205

Name	Operator	Version
prague-al00a_firmware	eq	< prague-al0ac0b205
prague-al00b_firmware	eq	< prague-al0bc0b205
prague-al00c_firmware	eq	< prague-al0cc0b205
prague-tl00a_firmware	eq	< prague-tl0ac1b205
prague-tl10a_firmware	eq	< prague-tl10ac1b205