CVE-2017-6295

CWE-125 — Out-of-bounds Read3 documents3 sources
Severity
8.4HIGH
EPSS
0.0%
top 96.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Nvidia Shield TV FirmwareNvidia Corporation Shield TV
Timeline
PublishedMar 6
Latest updateMay 14

Description

NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:HExploitability: 2.0 | Impact: 5.8

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-prhf-74x9-2hj2: NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning↗2022-05-14
▶
CVEList
CVE-2017-6295: NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning↗2018-03-06
▶
CVE-2017-6295 (HIGH CVSS 8.4) | NVIDIA TrustZone Software contains | cvebase.io