The CameraISP driver of some Huawei smart phones with software of versions earlier than Prague-AL00AC00B205,versions earlier than…

Description

The CameraISP driver of some Huawei smart phones with software of versions earlier than Prague-AL00AC00B205,versions earlier than Prague-AL00BC00B205,versions earlier than Prague-AL00CC00B205,versions earlier than Prague-TL00AC01B205,versions earlier than Prague-TL10AC01B205 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP, the APP can send a specific parameter to the CameraISP driver of the smart phone, causing system reboot.

Scores

EPSS (exploitation in 30 days)

0.70% · top 47% of all CVEs (3 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Weakness

• buffer overflow
• CWE-119 (opens in a new tab)All about CWE-119 and its CVEs

Affected products

• Huawei Technologies Co., Ltd. · Prague-AL00A,Prague-AL00B,Prague-AL00C,Prague-TL00A,Prague-TL10A

  • affected Versions earlier than Prague-AL00AC00B205,Versions earlier than Prague-AL00BC00B205,Versions earlier than Prague-AL00CC00B205,Versions earlier than Prague-TL00AC01B205,Versions earlier than Prague-TL10AC01B205

References (2)

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-smartphone-en (opens in a new tab)x_refsource_CONFIRMx_transferred
• 101959 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2017-8202](https://trackcve.app/badge/CVE-2017-8202.svg)](https://trackcve.app/cve/CVE-2017-8202)

Record last updated 17 Sept 2024, 01:56 UTC.