PT-2023-23112 · Nvidia · Nvidia Geforce Now

Published 2023-09-07 · Updated 2023-09-22 · CVE-2023-31014

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Now for Android (affected versions not specified)

Description The issue is related to a vulnerability in the game launcher component of NVIDIA GeForce Now for Android. A malicious application on the same device can process the implicit intent meant for the streamer component. This may lead to limited information disclosure, denial of service, and code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

CWE-927

Related Identifiers

CVE-2023-31014

Affected Products

Nvidia Geforce Now

References · 7

• https://nvidia.custhelp.com/app/answers/detail/a_id/5476 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-31014 · Security Note
• https://osv.dev/vulnerability/CVE-2023-31014 · Vendor Advisory
• https://twitter.com/CVEnew/status/1704313373922340977 · Twitter Post
• https://t.me/cvenotify/58151 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1704371843728113738 · Twitter Post
• https://twitter.com/NVIDIAPSIRT/status/1699841998092660886 · Twitter Post