PT-2017-9060 · Nvidia · Shield Table+3

Natecray + 1 · Publicado 2017-04-24 · Atualizado 2017-10-19 · CVE-2016-6916

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA video driver for Android versions prior to OTA 3.3 Shield TV versions prior to OTA 3.3 Shield Table versions prior to OTA 4.4 Shield Table TK1 versions prior to OTA 1.5

Description The issue is related to an integer overflow in the nvhost job.c file of the NVIDIA video driver for Android. This overflow can lead to a buffer overflow, causing a denial of service, which results in a system crash. The exact vectors that trigger this issue are not specified.

Recommendations For NVIDIA video driver for Android versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield TV versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield Table versions prior to OTA 4.4, update to OTA 4.4 or later. For Shield Table TK1 versions prior to OTA 1.5, update to OTA 1.5 or later.

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2016-6916

Produtos afetados

Nvidia Video Driver

Shield Tv

Shield Table

Shield Table Tk1

Referências · 6

• http://nvidia.custhelp.com/app/answers/detail/a_id/4561 · Nota
• https://source.android.com/security/bulletin/2016-12-01 · Nota
• https://osv.dev/vulnerability/CVE-2016-6916 · Aviso do Fabricante
• http://securityfocus.com/bid/94667 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-6916 · Nota de Segurança
• https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in · Aviso do Fabricante