CVE-2017-2729

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-11-22 · updated 2026-06-17
Weakness: CWE-119

Description

The boot loaders in Honor 5A smart phones with software Versions earlier than CAM-TL00C01B193,Versions earlier than CAM-TL00HC00B193,Versions earlier than CAM-UL00C00B193 have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution.

Affected products

Huawei Honor 5A Firmware: before cam-tl00c01b193; before cam-tl00hc00b193; before cam-ul00c00b193 — fixed in cam-tl00c01b193, cam-tl00hc00b193, cam-ul00c00b193
Huawei P8 Lite Firmware: before ale-l02c635b568; before ale-l21c10b541; before ale-l21c185b568; before ale-l21c432b596; before ale-l21c464b595; before ale-l21c636b568 — fixed in ale-l02c635b568, ale-l21c10b541, ale-l21c185b568, ale-l21c432b596, ale-l21c464b595, ale-l21c636b568

How to fix

Upgrade to a fixed version: Huawei Honor 5A Firmware cam-tl00c01b193, cam-tl00hc00b193, cam-ul00c00b193; Huawei P8 Lite Firmware ale-l02c635b568, ale-l21c10b541, ale-l21c185b568, ale-l21c432b596. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2017-2729 or the next vulnerability affects your stack