Google Android NVIDIA component elevation of privilege vulnerability (CNVD-2018-10691)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android NVIDIA TEE component, which can be exploited by attackers to elevate privileges...

Android Security Bulletin—May 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2018-05-05 or later address all of these issues. To learn how to check a device's security patch level, see Check & update your Android version. Android partners are...

Buffer overflow

Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery Mode RCM. An attacker with physical access to the device's USB and the ability to force the device to reboot into RCM could exploit the vulnerability to execute unverified code...

CVE-2018-6242

Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery Mode RCM. An attacker with physical access to the device's USB and the ability to force the device to reboot into RCM could exploit the vulnerability to execute unverified code...

CVE-2018-6242

Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery Mode RCM. An attacker with physical access to the device's USB and the ability to force the device to reboot into RCM could exploit the vulnerability to execute unverified code...

CVE-2018-6242

CVE-2018-6242 affects NVIDIA Tegra mobile processors released before 2016, via a buffer overflow in BootROM Recovery Mode (RCM). The underlying issue lets an attacker with physical access and a USB connection force reboot into RCM to execute unverified code. Public materials confirm exploit guida...

CVE-2017-6289

In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment TEE contains a memory corruption due to unusual root cause vulnerability, which if run within the speculative execution of the TEE, may lead to local escalation of privileges. This issue is rated as...

The vulnerability of the NVIDIA Libnvomx component in the Android operating system allows a hacker to gain elevated privileges.

The vulnerability of the NVIDIA Libnvomx component in the Android operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

The vulnerability of the NVIDIA Libnvomx component in the Android operating system allows a hacker to gain elevated privileges.

The vulnerability of the NVIDIA Libnvomx component in the Android operating system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

Exploit Targets Nvidia Tegra-Based Nintendo Systems

UPDATE – Nvidia sought to downplay a vulnerability discovered in its Tegra X1-based systems in a recently published notice. “A researcher indicates that a person with physical access to older Tegra-based processors could connect to the device’s USB port, bypass the secure boot and execute...

Security Notice: NVIDIA Tegra RCM Vulnerability

NVIDIA'S response to the Tegra RCM issue April 24, 2018 This notice is a response to recent publications on a security issue regarding NVIDIA Tegra Recovery Mode RCM. A researcher indicates that a person with physical access to older Tegra-based processors could connect to the device's USB port,...

Apple macOS High Sierra NVIDIA Graphics Drivers Memory Read Limit Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.NVIDIA Graphics Drivers is one of the graphics driver components. A security vulnerability exists in NVIDIA Graphics Drivers in Apple macOS High Sierra versions prior to 10.13.4. An attacker can exploit...

Amazon Linux AMI : nvidia (ALAS-2018-991)

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where a NULL pointer dereference may lead to denial of service or possible escalation of privileges. CVE-2018-6247 NVIDIA Windows GPU Display Driver contains a vulnerability ...

Privilege escalation

An elevation of privilege vulnerability in the NVIDIA firmware processing code. Product: Android. Versions: Android kernel. Android ID: A-34112726. References: N-CVE-2017-0744...

CVE-2016-8482

An elevation of privilege vulnerability in the NVIDIA GPU driver. Product: Android. Versions: Android kernel. Android ID: A-31799863. References: N-CVE-2016-8482...

CVE-2017-0744

An elevation of privilege vulnerability in the NVIDIA firmware processing code. Product: Android. Versions: Android kernel. Android ID: A-34112726. References: N-CVE-2017-0744...

Privilege escalation

An elevation of privilege vulnerability in the NVIDIA GPU driver. Product: Android. Versions: Android kernel. Android ID: A-31799863. References: N-CVE-2016-8482...

CVE-2017-0744

CVE-2017-0744 is detailed in connected documents as an Elevation of Privilege (EoP) affecting Google device sound drivers, with a Low severity patch in the August 2017 OTA. The vulnerability is tied to NVIDIA firmware processing per the NVD entry for Android kernel, while Android bulletin section...

CVE-2017-0744

An elevation of privilege vulnerability in the NVIDIA firmware processing code. Product: Android. Versions: Android kernel. Android ID: A-34112726. References: N-CVE-2017-0744...

CVE-2016-8482

CVE-2016-8482 is documented as an elevation of privilege in the NVIDIA GPU driver affecting Android kernels. The available details indicate a memory handling issue (referencing memory after it has been freed) in the NVIDIA Tegra kernel/driver components, leading to potential privilege escalation ...