CVE-2017-6282

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary value to an arbitrary location which may lead to an escalation of privileges. This issue is rated as high.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-123

Affected software

Vendor	Product	Versions
Nvidia Corporation	SHIELD TV	NA

References

http://nvidia.custhelp.com/app/answers/detail/a_id/4631Vendor Advisory
http://nvidia.custhelp.com/app/answers/detail/a_id/4631Vendor Advisory

Timeline

Published: Mar 6, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-62835.5NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip rese CVE-2017-62845.5NVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG) where the DRBG does not properly initialize CVE-2017-62855.5NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This i CVE-2017-62867.8NVIDIA libnvomx contains a possible out of bounds write due to a missing bounds check which could lead to local escalation of privilege. Thi CVE-2017-62875.5NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This i CVE-2017-62885.5NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This i CVE-2017-62897.8In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment (TEE) contains a memory corruption (due to unusu CVE-2017-62907.8In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due to an integer overfl CVE-2017-62927.8In Android before the 2018-06-05 security patch level, NVIDIA TLZ TrustZone contains a possible out of bounds write due to integer overflow CVE-2017-62937.8In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes CVE-2017-62947.8In Android before the 2018-06-05 security patch level, NVIDIA Tegra X1 TZ contains a possible out of bounds write due to missing bounds chec CVE-2017-62958.4NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the