CVE-2017-6279

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

NVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in media server which may cause an out of bounds write and could lead to local code execution in a privileged process. This issue is rated as high. Product: Android. Version: N/A. Android: A-65023166. Reference: N-CVE-2017-6279.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Feb 6, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-62807.5NVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead to information disclosure. This issue is rat CVE-2017-62817.8NVIDIA libnvomx contains a possible out of bounds write due to a improper input validation which could lead to local escalation of privilege CVE-2017-62827.8NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary value to an arbitrary l CVE-2017-62835.5NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip rese CVE-2017-62845.5NVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG) where the DRBG does not properly initialize CVE-2017-62855.5NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This i CVE-2017-62867.8NVIDIA libnvomx contains a possible out of bounds write due to a missing bounds check which could lead to local escalation of privilege. Thi CVE-2017-62875.5NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This i CVE-2017-62885.5NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This i CVE-2017-62897.8In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment (TEE) contains a memory corruption (due to unusu CVE-2017-62907.8In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due to an integer overfl CVE-2017-62927.8In Android before the 2018-06-05 security patch level, NVIDIA TLZ TrustZone contains a possible out of bounds write due to integer overflow