CVE-2017-8209 is a buffer overflow vulnerability affecting Huawei Honor 5C and Honor 6X smartphones with specific older software versions. It arises from insufficient parameter validation in the device driver. An attacker could trick a user into installing a malicious Android application with root privileges, which could then send a specially crafted parameter to the driver, leading to a system reboot or arbitrary code execution. The vulnerability has a CVSS v3.0 score of 7.8 (High), indicating a significant risk. It requires user interaction (UI:R) to install a malicious application, but once installed, the attack complexity is low (AC:L) and can result in high impacts to confidentiality, integrity, and availability (C:H/I:H/A:H). There is no evidence of active exploitation (KEV: No) and no known public exploit code available (Metasploit, Nuclei, ExploitDB: None). Community discussion and media coverage for this CVE are also minimal, suggesting it has not garnered widespread attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< nem-al10c00b356CPE matchmatch criteria | cpe:2.3:o:huawei:honor_5c_firmware:*:*:*:*:*:*:*:* | ||
< berlin-l21hnc432b360CPE matchmatch criteria | cpe:2.3:o:huawei:honor_6x_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.