CVE-2018-6267

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software does not validate or incorrectly validates input that can affect the control flow or data flow of a program, which may lead to denial of service or escalation of privileges. Android ID: A-70857947.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
Nvidia CorporationAndroidn/a

References

Timeline

Published
Feb 13, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-62687.8NVIDIA Tegra library contains a vulnerability in libnvmmlite_video.so, where referencing memory after it has been freed may lead to denial oCVE-2018-62697.8NVIDIA Jetson TX2 contains a vulnerability in the kernel driver where input/output control (IOCTL) handling for user mode requests could creCVE-2018-62717.8NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software delivers extra data with the buffer and does not propeCVE-2018-62888.8Cross-site Request Forgery leading to Administrative account takeover in Kaspersky Secure Mail Gateway version 1.1.CVE-2018-62899.8Configuration file injection leading to Code Execution as Root in Kaspersky Secure Mail Gateway version 1.1.CVE-2018-62907.8Local Privilege Escalation in Kaspersky Secure Mail Gateway version 1.1.CVE-2018-62916.1WebConsole Cross-Site Scripting in Kaspersky Secure Mail Gateway version 1.1.CVE-2018-62929.8Remote Code Execution in Saperion Web Client version 7.5.2 83166.CVE-2018-62937.5Arbitrary File Read in Saperion Web Client version 7.5.2 83166.CVE-2018-62949.8Unsecured way of firmware update in Hanwha Techwin SmartcamsCVE-2018-62959.8Unencrypted way of remote control and communications in Hanwha Techwin SmartcamsCVE-2018-62965.3An undocumented (hidden) capability for switching the web interface in Hanwha Techwin Smartcams
CVE-2018-6267: High severity, CVSS 7.8 | Vulnix