Nvidia Corporation Android vulnerabilities

CVE-2017-0332 [HIGH] CWE-787 CVE-2017-0332: An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious a An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-33812508. References: N-CVE-2017-0332.

CVE-2017-0329 [HIGH] CVE-2017-0329: An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver cou An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver could enable a local malicious application to execute arbitrary code within the context of the boot and power management processor. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.18. Andr

CVE-2017-0327 [HIGH] CWE-120 CVE-2017-0327: An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious a An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-33893669. References: N-CVE-2017-0327.

CVE-2017-0339 [HIGH] CVE-2017-0339: An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious a An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-27930566. References: N-CVE-2017-0339.

CVE-2017-0325 [HIGH] CWE-787 CVE-2017-0325: An elevation of privilege vulnerability in the NVIDIA I2C HID driver could enable a local malicious An elevation of privilege vulnerability in the NVIDIA I2C HID driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10 and Kernel 3.18. Android ID: A-33040280. References: N-

CVE-2017-6280 [HIGH] CWE-125 CVE-2017-6280: NVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead to i NVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead to information disclosure. This issue is rated as moderate. Android: A-63851980.

CVE-2018-6268 [HIGH] CWE-416 CVE-2018-6268: NVIDIA Tegra library contains a vulnerability in libnvmmlite_video.so, where referencing memory afte NVIDIA Tegra library contains a vulnerability in libnvmmlite_video.so, where referencing memory after it has been freed may lead to denial of service or possible escalation of privileges. Android ID: A-80433161.

CVE-2017-6262 [HIGH] CWE-416 CVE-2017-6262: NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur d NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to a race condition which could enable unauthorized code execution and possibly lead to elevation of privileges. This issue is rated as high. Product: Android. Version: N/A. Android ID: A-38045794. References: N-CVE-2017-6262.

CVE-2018-6246 [MEDIUM] CWE-200 CVE-2018-6246: In Android before the 2018-05-05 security patch level, NVIDIA Widevine Trustlet contains a vulnerabi In Android before the 2018-05-05 security patch level, NVIDIA Widevine Trustlet contains a vulnerability in Widevine TA where the software reads data past the end, or before the beginning, of the intended buffer, which may lead to Information Disclosure. This issue is rated as moderate. Android: A-69383916. Reference: N-CVE-2018-6246.

CVE-2017-0336 [MEDIUM] CWE-200 CVE-2017-0336: An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious appl An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.18. Android ID: A-33042679. References: N-CVE-2

CVE-2017-0334 [MEDIUM] CWE-200 CVE-2017-0334: An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious appl An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.18. Android ID: A-33245849. References: N-CVE-2

CVE-2017-6285 [MEDIUM] CWE-125 CVE-2017-6285: NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is rated as moderate. Product: Android. Version: N/A. Android: A-64893156. Reference: N-CVE-2017-6285.

CVE-2017-6287 [MEDIUM] CWE-125 CVE-2017-6287: NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is rated as moderate.Product: Android. Version: N/A. Android: A-64893264. Reference: N-CVE-2017-6287.

CVE-2017-6288 [MEDIUM] CWE-125 CVE-2017-6288: NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is rated as moderate. Product: Android. Version: N/A. Android: A-65482562. Reference: N-CVE-2017-6288.

CVE-2017-0326 [MEDIUM] CWE-200 CVE-2017-0326: An information disclosure vulnerability in the NVIDIA Video Driver due to an out-of-bounds read func An information disclosure vulnerability in the NVIDIA Video Driver due to an out-of-bounds read function in the Tegra Display Controller driver could result in possible information disclosure. This issue is rated as Moderate. Product: Android. Version: N/A. Android ID: A-33718700. References: N-CVE-2017-0326.

CVE-2017-0328 [MEDIUM] CWE-200 CVE-2017-0328: An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious a An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-33898322. References: N-CVE-2017-0328.

CVE-2017-0330 [MEDIUM] CWE-200 CVE-2017-0330: An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious a An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-33899858. References: N-CVE-2017-0330.

CVE-2018-6254 [LOW] CWE-125 CVE-2018-6254: In Android before the 2018-05-05 security patch level, NVIDIA Media Server contains an out-of-bounds In Android before the 2018-05-05 security patch level, NVIDIA Media Server contains an out-of-bounds read (due to improper input validation) vulnerability which could lead to local information disclosure. This issue is rated as moderate. Android: A-64340684. Reference: N-CVE-2018-6254.