Integer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5 allows local users to cause a denial of service (system crash) via unspecified vectors, which triggers a buffer overflow.
References
Link | Resource |
---|---|
http://nvidia.custhelp.com/app/answers/detail/a_id/4561 | |
http://www.securityfocus.com/bid/94667 | Third Party Advisory VDB Entry |
https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in | Vendor Advisory |
https://source.android.com/security/bulletin/2016-12-01 | Third Party Advisory |
http://nvidia.custhelp.com/app/answers/detail/a_id/4561 | |
http://www.securityfocus.com/bid/94667 | Third Party Advisory VDB Entry |
https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in | Vendor Advisory |
https://source.android.com/security/bulletin/2016-12-01 | Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
History
21 Nov 2024, 02:57
Type | Values Removed | Values Added |
---|---|---|
References | () http://nvidia.custhelp.com/app/answers/detail/a_id/4561 - | |
References | () http://www.securityfocus.com/bid/94667 - Third Party Advisory, VDB Entry | |
References | () https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in - Vendor Advisory | |
References | () https://source.android.com/security/bulletin/2016-12-01 - Third Party Advisory |
Information
Published : 2017-04-24 19:59
Updated : 2024-11-21 02:57
NVD link : CVE-2016-6916
Mitre link : CVE-2016-6916
CVE.ORG link : CVE-2016-6916
JSON object : View
Products Affected
nvidia
- shield_tablet_tk1_firmware
- shield_tablet_firmware
- shield_tablet
- shield_tv
- video_driver
- shield_tablet_tk1
- shield_tv_firmware
- pixel_c
- nexus_9
CWE
CWE-190
Integer Overflow or Wraparound