Use After Free Vulnerability in NVIDIA Drivers for Android Devices
CVE-2017-6262

7HIGH

Key Information:

Vendor
Nvidia
Status
Android
Vendor
CVE Published:
6 December 2017

Summary

The NVIDIA drivers for Android exhibit a vulnerability that stems from a use after free condition due to a race condition. This flaw could potentially allow an attacker to execute unauthorized code, leading to elevation of privileges on affected devices. It is critical for users and administrators to be aware of this issue and apply necessary updates or mitigations to safeguard against exploitation.

Affected Version(s)

Android NA

References

http://www.securityfocus.com/bid/102106
vdb-entryx_refsource_BID
https://source.android.com/security/bulletin/2017-12-01
x_refsource_CONFIRM

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.