PT-2017-9061 · Nvidia · Shield Table+3

Natecray + 1 · Publicado 2017-04-24 · Atualizado 2017-10-19 · CVE-2016-6917

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA video driver for Android versions prior to OTA 3.3 Shield TV versions prior to OTA 3.3 Shield Table versions prior to OTA 4.4 Shield Table TK1 versions prior to OTA 1.5

Description A buffer overflow issue exists in the nvhost job.c file of the NVIDIA video driver for Android. This issue may be exploited in real-world attacks, although specific details about such incidents are not provided.

Recommendations For NVIDIA video driver for Android versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield TV versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield Table versions prior to OTA 4.4, update to OTA 4.4 or later. For Shield Table TK1 versions prior to OTA 1.5, update to OTA 1.5 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2016-6917

Produtos afetados

Nvidia Video Driver

Shield Tv

Shield Table

Shield Table Tk1

Referências · 6

• http://nvidia.custhelp.com/app/answers/detail/a_id/4561 · Nota
• https://source.android.com/security/bulletin/2016-12-01 · Nota
• https://osv.dev/vulnerability/CVE-2016-6917 · Aviso do Fabricante
• http://securityfocus.com/bid/94667 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-6917 · Nota de Segurança
• https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in · Aviso do Fabricante