NVIDIA GeForce Now for Android Vulnerability in Game Launcher Component
CVE-2023-31014

4.2MEDIUM

Key Information:

Vendor

Nvidia
Status
Geforce Now For Android Mobile And Tv App
Vendor
CVE Published:
20 September 2023

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2023-31014?

NVIDIA GeForce Now for Android includes a flaw within its game launcher component, where a malicious application on the same device can intercept and process implicit intents designed for the streamer component. This vulnerability can be manipulated to enable unauthorized information disclosure, service disruptions, and potential execution of arbitrary code on the device, placing users at risk.

Affected Version(s)

GeForce NOW for Android mobile and TV app 6.00.32705137 to 6.04.33108832

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2023-31014_Lab
Created by LazyBear8372

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5476

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.