Security Bulletin: NVIDIA SHIELD Contains Multiple Vulnerabilities in nvhost_job.c

Vulnerability Details

CVE-2016-6915

NVIDIA nvhost_job.c contains a vulnerability in the stack buffer overflow, leading to a system crash (Android Security Bulletin – December 2016)

CVSS Base Score: 8.4
CVSS Temporal Score: 7.6
CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

CVE-2016-6916

NVIDIA nvhost_job.c contains a vulnerability in the integer overflow, leading to a buffer overflow and causing a system crash (Android Security Bulletin – December 2016)

CVSS Base Score: 8.4
CVSS Temporal Score: 7.6
CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

CVE-2016-6917

Description: NVIDIA nvhost_job.c contains a vulnerability in the buffer overflow, leading to a system crash (Android Security Bulletin – December 2016)

CVSS Base Score: 8.4
CVSS Temporal Score: 7.6
CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

NVIDIA’s risk assessment is based on an average of risk across a diverse set of installed systems and may not represent the true risk of your local installation. NVIDIA recommends consulting a local security or IT professional to evaluate the risk of your specific configuration. NVIDIA doesn’t know of any exploits to these issues at this time.