Google Android NVIDIA component elevation of privilege vulnerability (CNVD-2018-12654)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android NVIDIA component NVIDIA Tegra X1 TZ. An attacker can exploit this vulnerability to achieve elevation of...

CVE-2017-6293

In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes data past the end, or before the beginning, of the intended buffer, which may lead to escalation of Privileges. This issue is rated as high. Android:...

Design/Logic Flaw

In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes data past the end, or before the beginning, of the intended buffer, which may lead to escalation of Privileges. This issue is rated as high. Android:...

CVE-2017-6293

CVE-2017-6293 affects NVIDIA SHIELD TV via the Tegra X1 TZ (Widevine TA); a buffer overrun in the TZ/TEE path allows local privilege escalation. The issue is described as a local code execution/elevation of privilege on the Tegra kernel driver. Public details in the connected documents indicate t...

CVE-2017-6293

In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes data past the end, or before the beginning, of the intended buffer, which may lead to escalation of Privileges. This issue is rated as high. Android:...

CVE-2017-6293: Out-of-bounds Write

In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes data past the end, or before the beginning, of the intended buffer, which may lead to escalation of Privileges. This issue is rated as high. Android:...

CVE-2018-6242: Improper Restriction of Operations within the Bounds of a Memory Buffer

Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery Mode RCM. An attacker with physical access to the device's USB and the ability to force the device to reboot into RCM could exploit the vulnerability to execute unverified code...

PT-2018-1373

Name of the Vulnerable Software and Affected Versions Android versions prior to the 2018-05-05 security patch level Description The issue is caused by the software writing data past the end, or before the beginning, of the intended buffer in the NVIDIA Tegra X1 TZ Widevine TA, which may lead to...

PT-2018-17434

Name of the Vulnerable Software and Affected Versions NVIDIA Tegra mobile processors affected versions not specified Description A buffer overflow issue exists in the BootROM Recovery Mode RCM of certain NVIDIA Tegra mobile processors. This could allow an attacker with physical access to the...

NVIDIA Tegra kernel CORE DVFS Thermal driver denial of service vulnerability

The NVIDIA Tegra Kernel is a program package kernel for the Tegra mobile superchip from NVIDIA, U.S. The CORE DVFS Thermal driver is one of the kernel's Dynamic Voltage Frequency Adjustment drivers. A security vulnerability exists in the CORE DVFS Thermal driver in the NVIDIA Tegra kernel. An...

CVE-2017-6278

NVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or write a buffer using an index or pointer that references a memory location after the end of the buffer, which may lead to a denial of service or possible escalation of privileges...

PT-2018-8327

Name of the Vulnerable Software and Affected Versions NVIDIA Tegra kernel affected versions not specified Description The issue is related to a buffer overflow in the CORE DVFS Thermal driver of the NVIDIA Tegra kernel, where an index or pointer may reference a memory location after the end of th...

CVE-2017-6278: Improper Restriction of Operations within the Bounds of a Memory Buffer

NVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or write a buffer using an index or pointer that references a memory location after the end of the buffer, which may lead to a denial of service or possible escalation of privileges...

CVE-2017-6282

NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary value to an arbitrary location which may lead to an escalation of privileges. This issue is rated as high...

PT-2018-8330

Name of the Vulnerable Software and Affected Versions NVIDIA Tegra affected versions not specified Description The NVIDIA Tegra kernel driver contains an issue in NVMAP, allowing an attacker to write an arbitrary value to any location, potentially leading to privilege escalation. Recommendations ...

CVE-2017-6282: Write-what-where Condition

NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary value to an arbitrary location which may lead to an escalation of privileges. This issue is rated as high...

Google NVIDIA Tegra X1 Direct rendering infrastructur boost vulnerability

Google Pixel is a smartphone device from Google, Inc.NVIDIA Tegra X1 is a processor chip from NVIDIA, Inc.Direct rendering infrastructur is an architecture for direct access to graphics hardware. The Direct rendering infrastructur vulnerability in the NVIDIA Tegra X1 on Google Pixel devices stems...

CVE-2017-0866

An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspace is passed as a pointer to kfree. This could lead to kernel memory corruption and possible code execution. This issue is rated as moderate. Product: Pixel...

Privilege escalation

An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspace is passed as a pointer to kfree. This could lead to kernel memory corruption and possible code execution. This issue is rated as moderate. Product: Pixel...

CVE-2017-0866

An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspace is passed as a pointer to kfree. This could lead to kernel memory corruption and possible code execution. This issue is rated as moderate. Product: Pixel...