CVE-2023-31014

CWE-927CWE-668 — Exposure to Wrong Sphere3 documents3 sources
Severity
4.8MEDIUM
EPSS
0.0%
top 90.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Nvidia Geforce NOWNvidia Geforce NOW FOR Android Mobile AND TV APP
Timeline
PublishedSep 20

Description

NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer component. A successful exploit of this vulnerability may lead to limited information disclosure, denial of service, and code execution.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:LExploitability: 0.8 | Impact: 3.4

Affected Packages2 packages

▶CVEListV5nvidia/geforce_now_for_android_mobile_and_tv_app6.00.32705137 to 6.04.33108832
▶NVDnvidia/geforce_now6.00.32705137 — 6.04.33108832

🔴Vulnerability Details

2
GHSA
GHSA-f243-59wc-pc7v: NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process t↗2023-09-20
▶
CVEList
CVE-2023-31014: NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process t↗2023-09-20
▶
CVE-2023-31014 (MEDIUM CVSS 4.8) | NVIDIA GeForce Now for Android cont | cvebase.io