CVE-2017-6284

CVE-2017-6284 describes a vulnerability in NVIDIA Security Engine’s DRBG where initialization/storage of sensitive data is flawed and encryption is weakened, potentially leading to information disclosure. NVIDIA’s NVIDIA Jetson TX1/TX2 Linux for Tegra updates (R28.3) address multiple issues inclu...

CVE-2016-6917

CVE-2016-6917 is a buffer overflow in nvhost_job.c of the NVIDIA video driver for Android, affecting Shield TV (OTA 3.3) and Shield Table (OTA 4.4) and Shield Table TK1 (OTA 1.5). The underlying issue is a buffer overflow in nvhost_job.c that can cause a system crash. The NVIDIA security bulletin...

CVE-2016-6915

CVE-2016-6915 refers to a stack-based buffer overflow in the NVIDIA nvhost_job.c driver path for NVIDIA Shield devices running Android. Affected are Shield TV (OTA 3.3 and earlier), Shield Table (OTA 4.4 and earlier), and Shield Table TK1 (OTA 1.5 and earlier). Root cause: stack-based overflow in...

CVE-2017-6295

Affected software/hardware: NVIDIA TrustZone Software (Keymaster) in NVIDIA SHIELD TV SE 6.2 and earlier. Vulnerability: reads data past the end or before the beginning of the intended buffer, potentially leading to denial of service or information disclosure. Impact/Severity: rated high (CVE-201...

CVE-2017-6283

CVE-2017-6283 affects NVIDIA Security Engine where the RSA keyslot read/write lock permissions are cleared on chip reset, potentially enabling information disclosure. The issue is documented across NVIDIA advisories (Jetson TX1/TX2/TK1 and SHIELD TV) as part of a set of vulnerabilities in the Sec...

CVE-2017-6296

NVIDIA CVE-2017-6296 affects the TrustZone DRM application in NVIDIA SHIELD TV. The issue is a TOCTOU vulnerability that may lead to denial of service or privilege escalation. Public details identify SHIELD TV SE 6.2 and earlier as affected; NVIDIA’s bulletin indicates updating to SE 6.3 to mitig...

CVE-2016-6916

CVE-2016-6916 describes an integer overflow in nvhost_job.c of the NVIDIA video driver. A local user can trigger a buffer overflow to cause a denial of service (system crash) on affected Android/SHIELD devices (e.g., Shield TV before OTA 3.3, Shield Table before OTA 4.4, Shield Table TK1 before O...

CVE-2017-6282

CVE-2017-6282 affects the NVIDIA Tegra kernel driver (NVMAP) where an attacker can write an arbitrary value to an arbitrary location, potentially causing privilege escalation. Documents confirm the vulnerability in the Tegra kernel driver and NVMAP component, with CVSS v3.0 scores (9.3 base, high...