CVE-2017-6283

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to information disclosure. This issue is rated as high.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Mar 6, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-62845.5NVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG) where the DRBG does not properly initializeCVE-2017-62855.5NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This iCVE-2017-62867.8NVIDIA libnvomx contains a possible out of bounds write due to a missing bounds check which could lead to local escalation of privilege. ThiCVE-2017-62875.5NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This iCVE-2017-62885.5NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This iCVE-2017-62897.8In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment (TEE) contains a memory corruption (due to unusuCVE-2017-62907.8In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due to an integer overflCVE-2017-62927.8In Android before the 2018-06-05 security patch level, NVIDIA TLZ TrustZone contains a possible out of bounds write due to integer overflow CVE-2017-62937.8In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes CVE-2017-62947.8In Android before the 2018-06-05 security patch level, NVIDIA Tegra X1 TZ contains a possible out of bounds write due to missing bounds checCVE-2017-62958.4NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before theCVE-2017-62967.0NVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or possible escalation of p
CVE-2017-6283: Medium severity, CVSS 5.5 | Vulnix