Nathan Crandall

**Nome do software vulnerável e versões afetadas** ConnMan versões 1.41 e anteriores **Descrição** O problema está relacionado a um estouro de buffer baseado em heap no componente received data do módulo gweb no ConnMan. Isso pode ser explorado por invasores remotos que enviem solicitações HTTP ao componente gweb, permitindo-lhes, potencialmente, executar código arbitrário. A vulnerabilidade está associada a um estouro de buffer, o que pode levar à execução de código. **Recomendações** Para as versões 1.41 e anteriores do ConnMan, considere desativar o componente gweb ou restringir o acesso a ele até que uma correção esteja disponível. Como solução temporária, evite usar o componente received data no módulo gweb para minimizar o risco de exploração.

**Name of the Vulnerable Software and Affected Versions** Qualcomm products with Android releases from CAF using the Linux kernel (affected versions not specified) **Description** The issue allows kernel memory contents to leak to system logs if a userspace string is not NULL-terminated. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android (affected versions not specified) **Description** A race condition exists in a QTEE driver in the Linux kernel used by Android releases from CAF, potentially leading to an arbitrary memory write. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WebKitGTK+ versions prior to 2.16.3 **Description** The UNIX IPC layer in WebKit does not properly validate certain message metadata, allowing a compromised secondary process to cause a denial of service of the UI process. This issue does not affect Apple products. **Recommendations** For WebKitGTK+ versions prior to 2.16.3, update to version 2.16.3 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** WebKitGTK+ versions prior to 2.16.3 **Description** The issue arises from improper validation of message size metadata in the UNIX IPC layer of WebKit, including WebKitGTK+. This allows a compromised secondary process to trigger an integer overflow, leading to a subsequent buffer overflow in the UI process. It is noted that this issue does not affect Apple products. **Recommendations** For WebKitGTK+ versions prior to 2.16.3, update to version 2.16.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the IPC::Connection::processMessage function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** NVIDIA video driver versions prior to the fixed version **Description** The issue is related to insufficient access control in the NVIDIA video driver for the Android operating system. It allows a remote attacker to execute arbitrary code within the context of the kernel. This could lead to a local permanent device compromise, requiring reflashing the operating system to repair the device. **Recommendations** For versions prior to the fixed version, consider restricting access to the kernel until a patch is available. As a temporary workaround, avoid using the NVIDIA video driver until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NVIDIA video driver for Android versions prior to OTA 3.3 Shield TV versions prior to OTA 3.3 Shield Table versions prior to OTA 4.4 Shield Table TK1 versions prior to OTA 1.5 **Description** A stack-based buffer overflow issue exists in the nvhost job.c file of the NVIDIA video driver for Android. This issue may be exploited in real-world attacks, although specific details about such incidents are not provided. The estimated number of potentially affected devices worldwide is not available. **Recommendations** For NVIDIA video driver for Android versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield TV versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield Table versions prior to OTA 4.4, update to OTA 4.4 or later. For Shield Table TK1 versions prior to OTA 1.5, update to OTA 1.5 or later.

**Name of the Vulnerable Software and Affected Versions** NVIDIA video driver for Android versions prior to OTA 3.3 Shield TV versions prior to OTA 3.3 Shield Table versions prior to OTA 4.4 Shield Table TK1 versions prior to OTA 1.5 **Description** The issue is related to an integer overflow in the `nvhost job.c` file of the NVIDIA video driver for Android. This overflow can lead to a buffer overflow, causing a denial of service, which results in a system crash. The exact vectors that trigger this issue are not specified. **Recommendations** For NVIDIA video driver for Android versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield TV versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield Table versions prior to OTA 4.4, update to OTA 4.4 or later. For Shield Table TK1 versions prior to OTA 1.5, update to OTA 1.5 or later.

**Name of the Vulnerable Software and Affected Versions** NVIDIA video driver for Android versions prior to OTA 3.3 Shield TV versions prior to OTA 3.3 Shield Table versions prior to OTA 4.4 Shield Table TK1 versions prior to OTA 1.5 **Description** A buffer overflow issue exists in the nvhost job.c file of the NVIDIA video driver for Android. This issue may be exploited in real-world attacks, although specific details about such incidents are not provided. **Recommendations** For NVIDIA video driver for Android versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield TV versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield Table versions prior to OTA 4.4, update to OTA 4.4 or later. For Shield Table TK1 versions prior to OTA 1.5, update to OTA 1.5 or later.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to the fixed version **Description** The issue is related to an elevation of privilege vulnerability in the NVIDIA crypto driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This problem is rated as High because it first requires compromising a privileged process. **Recommendations** For Android versions prior to the fixed version, update to a version that includes the fix for this issue to prevent potential exploitation. As a temporary workaround, consider restricting access to the NVIDIA crypto driver until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Android versions Kernel-3.10 **Description** The issue is related to an information disclosure vulnerability in the HTC sound codec driver, which could allow a local malicious application to access data outside of its permission levels. This is rated as Moderate because it first requires compromising a privileged process. **Recommendations** For Android versions Kernel-3.10, update the operating system to a version that includes the fix for this issue, as compromising a privileged process is required for exploitation.

**Name of the Vulnerable Software and Affected Versions** NVIDIA GPU driver versions prior to the fixed version **Description** The issue is related to insufficient access control in the NVIDIA GPU driver for the Android operating system, allowing a remote attacker to launch an application with the privileges of the current user. A local malicious application can execute arbitrary code within the context of the kernel, potentially leading to a local permanent device compromise. This may require reflashing the operating system to repair the device. **Recommendations** For versions prior to the fixed version, consider restricting access to the kernel to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-08-05 on Nexus 9 devices **Description** The issue is related to the NVIDIA media driver in Android, which has inadequate access control. This allows attackers to gain privileges via a crafted application. **Recommendations** For Android versions prior to 2016-08-05 on Nexus 9 devices, update the system to a version released after 2016-08-05 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** NVIDIA media driver versions prior to 2016-08-05 **Description** The issue is related to insufficient access control in the NVIDIA media driver for the Android operating system. It can be exploited by a local attacker using a specially crafted application to elevate their privileges. **Recommendations** For versions prior to 2016-08-05, update the NVIDIA media driver to a version released after 2016-08-05 to resolve the issue.