PT-2017-9059 · Nvidia · Shield Table+3

Natecray + 1 · Published 2017-04-24 · Updated 2017-10-19 · CVE-2016-6915

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA video driver for Android versions prior to OTA 3.3 Shield TV versions prior to OTA 3.3 Shield Table versions prior to OTA 4.4 Shield Table TK1 versions prior to OTA 1.5

Description A stack-based buffer overflow issue exists in the nvhost job.c file of the NVIDIA video driver for Android. This issue may be exploited in real-world attacks, although specific details about such incidents are not provided. The estimated number of potentially affected devices worldwide is not available.

Recommendations For NVIDIA video driver for Android versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield TV versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield Table versions prior to OTA 4.4, update to OTA 4.4 or later. For Shield Table TK1 versions prior to OTA 1.5, update to OTA 1.5 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2016-6915

Affected Products

Nvidia Video Driver

Shield Tv

Shield Table

Shield Table Tk1

References · 6

• http://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-6915 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6915 · Security Note
• http://nvidia.custhelp.com/app/answers/detail/a_id/4561 · Note
• https://source.android.com/security/bulletin/2016-12-01 · Note
• http://securityfocus.com/bid/94667 · Note