PT-2017-2498 · Nvidia+1 · Nvidia Libnvparser+1

Billy Lau · Publicado 2017-07-07 · Atualizado 2019-10-03 · CVE-2017-0340

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android (affected versions not specified)

Description The issue is related to an elevation of privilege vulnerability in the NVIDIA Libnvparser component. This vulnerability could lead to memory corruption and possible remote code execution due to a memcpy into a fixed-sized buffer with a user-controlled size. The vulnerability is associated with insufficient access control and can be exploited by a remote attacker to cause memory damage or execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-119

CWE-264

Identificadores relacionados

BDU:2017-01708

CVE-2017-0340

Produtos afetados

Android

Nvidia Libnvparser

Referências · 5

• http://securityfocus.com/bid/99477 · Nota
• https://source.android.com/security/bulletin/2017-07-01 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-0340 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2017-01708 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2017-0340 · Nota de Segurança