PT-2017-9060 · Nvidia · Shield Table+3

Natecray + 1 · Published 2017-04-24 · Updated 2017-10-19 · CVE-2016-6916

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA video driver for Android versions prior to OTA 3.3 Shield TV versions prior to OTA 3.3 Shield Table versions prior to OTA 4.4 Shield Table TK1 versions prior to OTA 1.5

Description The issue is related to an integer overflow in the nvhost job.c file of the NVIDIA video driver for Android. This overflow can lead to a buffer overflow, causing a denial of service, which results in a system crash. The exact vectors that trigger this issue are not specified.

Recommendations For NVIDIA video driver for Android versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield TV versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield Table versions prior to OTA 4.4, update to OTA 4.4 or later. For Shield Table TK1 versions prior to OTA 1.5, update to OTA 1.5 or later.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2016-6916

Affected Products

Nvidia Video Driver

Shield Tv

Shield Table

Shield Table Tk1

References · 6

• https://osv.dev/vulnerability/CVE-2016-6916 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6916 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in · Vendor Advisory
• http://nvidia.custhelp.com/app/answers/detail/a_id/4561 · Note
• https://source.android.com/security/bulletin/2016-12-01 · Note
• http://securityfocus.com/bid/94667 · Note