CVE-2017-6278

HIGH

NVIDIA Tegra Kernel < 24.2.2 - Buffer Overflow in CORE DVFS Thermal Driver

Title source: llm

Description

NVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or write a buffer using an index or pointer that references a memory location after the end of the buffer, which may lead to a denial of service or possible escalation of privileges.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

http://nvidia.custhelp.com/app/answers/detail/a_id/4635

Vendor Advisory x_refsource_confirm

https://nvidia.custhelp.com/app/answers/detail/a_id/4787

Scores

CVSS v3 7.8

EPSS 0.0005

EPSS Percentile 16.9%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (3)

nvidia/jetson_tk1_firmware < 21.6

nvidia/jetson_tx1_firmware < 24.2.2

nvidia/tegra_k1_firmware < 21.6

Published Mar 26, 2018

Tracked Since Feb 18, 2026