PT-2018-17435 · Google+1 · Android+1

Publicado 2018-05-10 · Atualizado 2018-06-14 · CVE-2018-6246

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android versions prior to the 2018-05-05 security patch level

Description The issue concerns a buffer overflow in the NVIDIA Widevine Trustlet, specifically in the Widevine TA, where the software reads data past the end or before the beginning of the intended buffer. This may lead to information disclosure. The issue is rated as moderate.

Recommendations For Android versions prior to the 2018-05-05 security patch level, update to a version that includes the 2018-05-05 security patch level or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-6246

Produtos afetados

Android

Nvidia Widevine Trustlet

Referências · 3

• https://osv.dev/vulnerability/CVE-2018-6246 · Aviso do Fabricante
• https://source.android.com/security/bulletin/pixel/2018-05-01 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-6246 · Nota de Segurança