Elevation of Privilege Vulnerability in NVIDIA's libnvmmlite_audio.so for Android
CVE-2017-6279

7.8HIGH

Key Information:

Vendor

Nvidia
Status
Android
Vendor
CVE Published:
6 February 2018

What is CVE-2017-6279?

The NVIDIA libnvmmlite_audio.so component exhibits an elevation of privilege vulnerability when operated within a media server context. This flaw can potentially allow local code execution through an out of bounds write, compromising the security of privileged processes. Addressing this issue is critical to ensuring the integrity and security of Android devices utilizing this library.

Affected Version(s)

Android NA

References

https://source.android.com/security/bulletin/2018-02-01
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.