Local Information Disclosure in NVIDIA libnvrm for Android Devices
CVE-2017-6288

5.5MEDIUM

Key Information:

Vendor

Nvidia
Status
Android
Vendor
CVE Published:
12 March 2018

What is CVE-2017-6288?

The NVIDIA libnvrm component for Android devices contains a security flaw that may allow for an out of bounds read. This vulnerability arises from the absence of proper bounds checking, potentially exposing sensitive local information to unauthorized users. It is crucial for device manufacturers and users to be aware and take necessary precautions to mitigate risks associated with such vulnerabilities.

Affected Version(s)

Android NA

References

https://source.android.com/security/bulletin/pixel/2018-0...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2017-6288 : Local Information Disclosure in NVIDIA libnvrm for Android Devices