TOCTOU Vulnerability in NVIDIA TrustZone Software
CVE-2017-6296

7HIGH

Key Information:

Vendor

Nvidia
Status
Shield Tv
Vendor
CVE Published:
6 March 2018

What is CVE-2017-6296?

NVIDIA TrustZone Software is impacted by a TOCTOU vulnerability within its DRM application. This flaw could potentially allow an attacker to exploit timing differences between the state of a resource's access permissions and its actual accessibility. As a result, this could lead to denial of service situations or enable an unauthorized escalation of privileges. Users of the software should remain vigilant and apply recommended patches to mitigate the risks associated with this vulnerability.

Affected Version(s)

SHIELD TV NA

References

http://nvidia.custhelp.com/app/answers/detail/a_id/4631
x_refsource_CONFIRM

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.