CVE-2016-6915

EUVD-2016-7800
Stack-based buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 21%
Affected Products (NVD)
VendorProductVersion
nvidiashield_tablet_firmware
𝑥
≤ 4.3.0
nvidiashield_tablet_tk1_firmware
𝑥
≤ 1.4.0
nvidiashield_tv_firmware
𝑥
≤ 3.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in
http://nvidia.custhelp.com/app/answers/detail/a_id/4561
http://www.securityfocus.com/bid/94667
https://source.android.com/security/bulletin/2016-12-01
http://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in
http://nvidia.custhelp.com/app/answers/detail/a_id/4561
http://www.securityfocus.com/bid/94667
https://source.android.com/security/bulletin/2016-12-01