PT-2017-2498 · Nvidia+1 · Nvidia Libnvparser+1

Billy Lau · Published 2017-07-07 · Updated 2019-10-03 · CVE-2017-0340

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android (affected versions not specified)

Description The issue is related to an elevation of privilege vulnerability in the NVIDIA Libnvparser component. This vulnerability could lead to memory corruption and possible remote code execution due to a memcpy into a fixed-sized buffer with a user-controlled size. The vulnerability is associated with insufficient access control and can be exploited by a remote attacker to cause memory damage or execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-264

Related Identifiers

BDU:2017-01708

CVE-2017-0340

Affected Products

Android

Nvidia Libnvparser

References · 5

• https://source.android.com/security/bulletin/2017-07-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-0340 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01708 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-0340 · Security Note
• http://securityfocus.com/bid/99477 · Note