CVE-2017-17324

Description

Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer overflow vulnerability. The camera driver does not validate the external input parameters and causes an integer overflow, which in the after processing results in a buffer overflow. An attacker tricks the user to install a crafted application, successful exploit could cause malicious code execution.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.352

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2017-17320 ,CVE-2017-17324 are affected in mate_9_pro_firmware lon-al00bc00b229	NCM
Vulnerabilities CVE-2017-17320 ,CVE-2017-17324 are affected in mate_9_pro_firmware lon-al00bc00b139d	NCM
Integer Overflow or Wraparound Vulnerability (CVE-2017-17324)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234