CVE-2017-8209: Huawei Honor 5c Firmware

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution.

Affected products

• Huawei Honor 5c Firmware: before nem-al10c00b356 (fixed in nem-al10c00b356)
• Huawei Honor 6x Firmware: before berlin-l21hnc432b360 (fixed in berlin-l21hnc432b360)

Published 2017-11-22. Last modified 2026-06-17.