CVE-2018-6271

HIGH

Android - Denial of Service or Privilege Escalation via NVIDIA Tegra OpenMax Driver Buffer Handling

Title source: llm
STIX 2.1

Description

NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software delivers extra data with the buffer and does not properly validated the extra data, which may lead to denial of service or escalation of privileges. Android ID: A-80198474.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/106846
Vendor Advisory x_refsource_confirm
https://source.android.com/security/bulletin/2019-02-01
Vendor Advisory x_refsource_confirm
https://nvidia.custhelp.com/app/answers/detail/a_id/4787
Vendor Advisory x_refsource_confirm
https://nvidia.custhelp.com/app/answers/detail/a_id/4910

Scores

CVSS v3 7.8
EPSS 0.0063
EPSS Percentile 45.7%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (1)
google/android
Published Feb 13, 2019
Tracked Since Feb 18, 2026