Vulnerabilites related to google - pixel_c
Vulnerability from fkie_nvd
Published
2016-05-09 10:59
Modified
2024-11-21 02:48
Severity ?
Summary
mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, related to IGraphicBufferConsumer.cpp and IGraphicBufferProducer.cpp, aka internal bug 27556038.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| android | 4.0 | ||
| android | 4.0.1 | ||
| android | 4.0.2 | ||
| android | 4.0.3 | ||
| android | 4.0.4 | ||
| android | 4.1 | ||
| android | 4.1.1 | ||
| android | 4.1.2 | ||
| android | 4.2 | ||
| android | 4.2.1 | ||
| android | 4.2.2 | ||
| android | 4.3 | ||
| android | 4.3.1 | ||
| android | 4.4 | ||
| android | 4.4.1 | ||
| android | 4.4.2 | ||
| android | 4.4.3 | ||
| android | 5.0 | ||
| android | 5.0.1 | ||
| android | 5.1 | ||
| android | 6.0 | ||
| android | 6.0.1 | ||
| android_one | - | ||
| nexus_5 | - | ||
| nexus_5x | - | ||
| nexus_6 | - | ||
| nexus_6p | - | ||
| nexus_7_\(2013\) | - | ||
| nexus_9 | - | ||
| nexus_player | - | ||
| pixel_c | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A39C31E3-75C0-4E92-A6B5-7D67B22E3449",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "BB318EA4-2908-4B91-8DBB-20008FDF528A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "1F4E46A9-B652-47CE-92E8-01021E57724B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "36DD8E3F-6308-4680-B932-4CBD8E58A7FB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "1DA9F0F7-D592-481E-884C-B1A94E702825",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:4.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "E1BBFD29-6A53-4B1E-9611-680442CD04EB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
"matchCriteriaId": "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A47AB858-36DE-4330-8CAC-1B46C5C8DA80",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "49413FF7-7910-4F74-B106-C3170612CB2A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
"matchCriteriaId": "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A8882E50-7C49-4A99-91F2-DF979CF8BB2F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
"matchCriteriaId": "98C32982-095C-4628-9958-118A3D3A9CAA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
"matchCriteriaId": "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
"matchCriteriaId": "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "7C4E6353-B77A-464F-B7DE-932704003B33",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "77125688-2CCA-4990-ABB2-551D47CB0CDD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E70C6D8D-C9C3-4D92-8DFC-71F59E068295",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "691FA41B-C2CE-413F-ABB1-0B22CB322807",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:google:android_one:-:*:*:*:*:*:*:*",
"matchCriteriaId": "50A96E21-4545-41AD-9FDB-E6F2B59F2DEF",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:nexus_5:-:*:*:*:*:*:*:*",
"matchCriteriaId": "25DB8689-116F-49B5-91F5-BCBA8854BD42",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:nexus_5x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "881D2748-D79A-491F-97AA-BB83BBDFD348",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:nexus_6:-:*:*:*:*:*:*:*",
"matchCriteriaId": "065B6512-4BB7-4A7D-B5C8-61E27B07D588",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:nexus_6p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A988DE0D-BFF2-453E-B502-A53F7976145A",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:nexus_7_\\(2013\\):-:*:*:*:*:*:*:*",
"matchCriteriaId": "8C58736F-CD29-489E-95AF-4066E688705D",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:nexus_9:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1018566D-5DBE-44BD-BA05-1F6A6375C32F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:nexus_player:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C28515A5-7911-40B0-971D-9F593142170E",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9526852E-8BF4-42AA-A9BC-84FEC564B871",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, related to IGraphicBufferConsumer.cpp and IGraphicBufferProducer.cpp, aka internal bug 27556038."
},
{
"lang": "es",
"value": "mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-05-01 no inicializa determinadas estructuras de datos, lo que permite a atacantes obtener informaci\u00f3n sensible a trav\u00e9s de una aplicaci\u00f3n manipulada, relacionado con IGraphicBufferConsumer.cpp y IGraphicBufferProducer.cpp, tambi\u00e9n conocido como error interno 27556038."
}
],
"id": "CVE-2016-2459",
"lastModified": "2024-11-21T02:48:29.593",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2016-05-09T10:59:37.297",
"references": [
{
"source": "security@android.com",
"tags": [
"Vendor Advisory"
],
"url": "http://source.android.com/security/bulletin/2016-05-01.html"
},
{
"source": "security@android.com",
"url": "https://android.googlesource.com/platform/frameworks/native/+/a30d7d90c4f718e46fb41a99b3d52800e1011b73"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://source.android.com/security/bulletin/2016-05-01.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://android.googlesource.com/platform/frameworks/native/+/a30d7d90c4f718e46fb41a99b3d52800e1011b73"
}
],
"sourceIdentifier": "security@android.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-200"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2024-10-25 11:15
Modified
2024-10-28 21:35
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
5.1 (Medium) - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
5.1 (Medium) - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Summary
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| dsap-vuln-management@google.com | https://source.android.com/security/bulletin/pixel/2024-10-01 | Vendor Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| android | * | ||
| pixel | - | ||
| pixel_2 | - | ||
| pixel_2_xl | - | ||
| pixel_3 | - | ||
| pixel_3_xl | - | ||
| pixel_3a | - | ||
| pixel_3a_xl | - | ||
| pixel_4 | - | ||
| pixel_4_xl | - | ||
| pixel_4a | - | ||
| pixel_4a_5g | - | ||
| pixel_5 | - | ||
| pixel_5a | - | ||
| pixel_6 | - | ||
| pixel_6_pro | - | ||
| pixel_6a | - | ||
| pixel_7 | - | ||
| pixel_7_pro | - | ||
| pixel_7a | - | ||
| pixel_8 | - | ||
| pixel_8_pro | - | ||
| pixel_8a | - | ||
| pixel_9 | - | ||
| pixel_9_pro | - | ||
| pixel_9_pro_fold | - | ||
| pixel_c | - | ||
| pixel_fold | - | ||
| pixel_pro_xl | - | ||
| pixel_slate | - | ||
| pixel_tablet | - | ||
| pixel_xl | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C1716AE3-39FD-430C-9B82-FDDEB29775B8",
"versionEndExcluding": "2024-10-05",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:google:pixel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B17D3A78-87DD-44CD-AB11-3E42AEB1A1D9",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6B76B2AD-52E2-41D2-82D7-557DC32E064F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_2_xl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "50F1BE2A-DC55-4AC2-8272-FC793CB93B48",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "95B55D72-61F8-4957-9C3D-8009C6966F40",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_3_xl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "128E8B67-E19C-4C1A-B7FB-081ACDB243C1",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_3a:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4F56191C-4FF1-4309-9169-AA83CF2F23F6",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_3a_xl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AD59B24F-5624-4BCB-985A-2CC9987EA69C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_4:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B8EFE6CB-CAFD-4F38-8548-A19A0FBFECC6",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_4_xl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B8BF63E4-BD56-40F9-AA33-5EB5D1D2A7BE",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_4a:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8E49FC5D-ACC7-498F-88E9-293AB276CF63",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_4a_5g:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C3936C02-6FC1-4B53-A54E-C49DBEFBC17A",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_5:-:*:*:*:*:*:*:*",
"matchCriteriaId": "821F3393-1034-4812-A091-D753EDA59E60",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_5a:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9FD673E4-9A74-4029-9E99-F741711A529C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_6:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C27C4FD0-E67A-4D54-A00A-BDD59AAABB4F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_6_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2FBDD7EC-7E2D-4703-9CE8-8B2422146F6D",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_6a:-:*:*:*:*:*:*:*",
"matchCriteriaId": "99FFC9C6-24A6-4479-8DA1-93DA62C89048",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_7:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6C1347ED-56D0-4AF8-92D8-D4E427B5A1CA",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_7_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "23904900-3001-4EA1-9A6C-C8F7EB2D3C42",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_7a:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C74EE811-A472-4509-A52F-34EE65FEDE7B",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_8:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7669A258-53B3-4599-B304-A99C47278583",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_8_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4E43578F-1598-4343-AC12-B71DE4E33C50",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_8a:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BF365A22-58DA-4D98-ADF0-FFD566BD62B5",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_9:-:*:*:*:*:*:*:*",
"matchCriteriaId": "58D7038F-BF44-45ED-8C35-6DD98D72A043",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_9_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3E0889AF-7B08-42CE-A721-87D99B9F27CF",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_9_pro_fold:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3485B56E-3A9C-4960-B58E-CE5291BD66CD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9526852E-8BF4-42AA-A9BC-84FEC564B871",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_fold:-:*:*:*:*:*:*:*",
"matchCriteriaId": "05242EED-D230-4968-A0B1-1472D6D645D4",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_pro_xl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2F0EF14B-06EF-4229-8364-7049A6E53D32",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_slate:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3A412160-3367-4945-BD00-A0D730C271CD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_tablet:-:*:*:*:*:*:*:*",
"matchCriteriaId": "831D6339-087B-4CFA-9AF7-FBE6FB5F7E00",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_xl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1674845A-B3D0-43E2-98FC-06E29A3C6A77",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488."
},
{
"lang": "es",
"value": "Android anterior al 2024-10-05 en los dispositivos Google Pixel permite la divulgaci\u00f3n de informaci\u00f3n en el componente ABL, A-331966488."
}
],
"id": "CVE-2024-47020",
"lastModified": "2024-10-28T21:35:17.183",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.4,
"impactScore": 3.6,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
},
"published": "2024-10-25T11:15:16.843",
"references": [
{
"source": "dsap-vuln-management@google.com",
"tags": [
"Vendor Advisory"
],
"url": "https://source.android.com/security/bulletin/pixel/2024-10-01"
}
],
"sourceIdentifier": "dsap-vuln-management@google.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2017-04-24 19:59
Modified
2024-11-21 02:57
Severity ?
Summary
Integer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5 allows local users to cause a denial of service (system crash) via unspecified vectors, which triggers a buffer overflow.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| nvidia | shield_tablet_firmware | * | |
| nvidia | shield_tablet | - | |
| nvidia | shield_tablet_tk1_firmware | * | |
| nvidia | shield_tablet_tk1 | - | |
| nvidia | shield_tv_firmware | * | |
| nvidia | shield_tv | - | |
| nvidia | video_driver | - | |
| nexus_9 | - | ||
| pixel_c | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nvidia:shield_tablet_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0750A91D-C568-49C4-86E0-D9DA075BA33D",
"versionEndIncluding": "4.3.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:shield_tablet:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A28C0ED3-654C-4783-B8A0-67D7C3D1FE9A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nvidia:shield_tablet_tk1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D103EA4F-A03D-487F-8686-838078B78199",
"versionEndIncluding": "1.4.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:shield_tablet_tk1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "845E4A71-7181-4AB6-9ADF-43ABC6C9A785",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nvidia:shield_tv_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8D495631-CFF4-46B5-AAAE-3E51717C1337",
"versionEndIncluding": "3.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:shield_tv:-:*:*:*:*:*:*:*",
"matchCriteriaId": "49F85C44-6B7E-4B7C-AC8D-9D5727DFA0B8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:nvidia:video_driver:-:*:*:*:*:android:*:*",
"matchCriteriaId": "C162AD10-3322-4317-B808-B6B517576F66",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:google:nexus_9:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1018566D-5DBE-44BD-BA05-1F6A6375C32F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9526852E-8BF4-42AA-A9BC-84FEC564B871",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Integer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5 allows local users to cause a denial of service (system crash) via unspecified vectors, which triggers a buffer overflow."
},
{
"lang": "es",
"value": "Desbordamiento de entero en nvhost_job.c en el video driver NVIDIA para Android, Shield TV en versiones anteriores a OTA 3.3, Shield Table en versiones anteriores a OTA 4.4, y Shield Table TK1 en versiones anteriores a OTA 1.5 permite usuarios locales provocar una denegaci\u00f3n de servicio (ca\u00edda del sistema) a trav\u00e9s de vectores no especificados, lo que desencadena desbordamiento de b\u00fafer."
}
],
"id": "CVE-2016-6916",
"lastModified": "2024-11-21T02:57:05.740",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2017-04-24T19:59:00.427",
"references": [
{
"source": "cve@mitre.org",
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/94667"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://source.android.com/security/bulletin/2016-12-01"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/94667"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://source.android.com/security/bulletin/2016-12-01"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-190"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2024-10-25 11:15
Modified
2024-10-28 13:50
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Summary
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| dsap-vuln-management@google.com | https://source.android.com/security/bulletin/pixel/2024-10-01 | Vendor Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| android | * | ||
| pixel | - | ||
| pixel_2 | - | ||
| pixel_2_xl | - | ||
| pixel_3 | - | ||
| pixel_3_xl | - | ||
| pixel_3a | - | ||
| pixel_3a_xl | - | ||
| pixel_4 | - | ||
| pixel_4_xl | - | ||
| pixel_4a | - | ||
| pixel_4a_5g | - | ||
| pixel_5 | - | ||
| pixel_5a | - | ||
| pixel_6 | - | ||
| pixel_6_pro | - | ||
| pixel_6a | - | ||
| pixel_7 | - | ||
| pixel_7_pro | - | ||
| pixel_7a | - | ||
| pixel_8 | - | ||
| pixel_8_pro | - | ||
| pixel_8a | - | ||
| pixel_9 | - | ||
| pixel_9_pro | - | ||
| pixel_9_pro_fold | - | ||
| pixel_c | - | ||
| pixel_fold | - | ||
| pixel_pro_xl | - | ||
| pixel_slate | - | ||
| pixel_tablet | - | ||
| pixel_xl | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C1716AE3-39FD-430C-9B82-FDDEB29775B8",
"versionEndExcluding": "2024-10-05",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:google:pixel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B17D3A78-87DD-44CD-AB11-3E42AEB1A1D9",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6B76B2AD-52E2-41D2-82D7-557DC32E064F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_2_xl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "50F1BE2A-DC55-4AC2-8272-FC793CB93B48",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "95B55D72-61F8-4957-9C3D-8009C6966F40",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_3_xl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "128E8B67-E19C-4C1A-B7FB-081ACDB243C1",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_3a:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4F56191C-4FF1-4309-9169-AA83CF2F23F6",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_3a_xl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AD59B24F-5624-4BCB-985A-2CC9987EA69C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_4:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B8EFE6CB-CAFD-4F38-8548-A19A0FBFECC6",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_4_xl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B8BF63E4-BD56-40F9-AA33-5EB5D1D2A7BE",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_4a:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8E49FC5D-ACC7-498F-88E9-293AB276CF63",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_4a_5g:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C3936C02-6FC1-4B53-A54E-C49DBEFBC17A",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_5:-:*:*:*:*:*:*:*",
"matchCriteriaId": "821F3393-1034-4812-A091-D753EDA59E60",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_5a:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9FD673E4-9A74-4029-9E99-F741711A529C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_6:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C27C4FD0-E67A-4D54-A00A-BDD59AAABB4F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_6_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2FBDD7EC-7E2D-4703-9CE8-8B2422146F6D",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_6a:-:*:*:*:*:*:*:*",
"matchCriteriaId": "99FFC9C6-24A6-4479-8DA1-93DA62C89048",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_7:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6C1347ED-56D0-4AF8-92D8-D4E427B5A1CA",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_7_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "23904900-3001-4EA1-9A6C-C8F7EB2D3C42",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_7a:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C74EE811-A472-4509-A52F-34EE65FEDE7B",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_8:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7669A258-53B3-4599-B304-A99C47278583",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_8_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4E43578F-1598-4343-AC12-B71DE4E33C50",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_8a:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BF365A22-58DA-4D98-ADF0-FFD566BD62B5",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_9:-:*:*:*:*:*:*:*",
"matchCriteriaId": "58D7038F-BF44-45ED-8C35-6DD98D72A043",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_9_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3E0889AF-7B08-42CE-A721-87D99B9F27CF",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_9_pro_fold:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3485B56E-3A9C-4960-B58E-CE5291BD66CD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9526852E-8BF4-42AA-A9BC-84FEC564B871",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_fold:-:*:*:*:*:*:*:*",
"matchCriteriaId": "05242EED-D230-4968-A0B1-1472D6D645D4",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_pro_xl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2F0EF14B-06EF-4229-8364-7049A6E53D32",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_slate:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3A412160-3367-4945-BD00-A0D730C271CD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_tablet:-:*:*:*:*:*:*:*",
"matchCriteriaId": "831D6339-087B-4CFA-9AF7-FBE6FB5F7E00",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_xl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1674845A-B3D0-43E2-98FC-06E29A3C6A77",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545."
},
{
"lang": "es",
"value": "Android anterior al 2024-10-05 en los dispositivos Google Pixel permite la divulgaci\u00f3n de informaci\u00f3n en el componente del m\u00f3dem, A-299774545."
}
],
"id": "CVE-2024-44100",
"lastModified": "2024-10-28T13:50:50.743",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
},
"published": "2024-10-25T11:15:16.293",
"references": [
{
"source": "dsap-vuln-management@google.com",
"tags": [
"Vendor Advisory"
],
"url": "https://source.android.com/security/bulletin/pixel/2024-10-01"
}
],
"sourceIdentifier": "dsap-vuln-management@google.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-276"
}
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
}
Vulnerability from fkie_nvd
Published
2017-04-24 19:59
Modified
2024-11-21 02:57
Severity ?
Summary
Buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| nvidia | shield_tablet_firmware | * | |
| nvidia | shield_tablet | - | |
| nvidia | shield_tablet_tk1_firmware | * | |
| nvidia | shield_tablet_tk1 | - | |
| nvidia | shield_tv_firmware | * | |
| nvidia | shield_tv | - | |
| nvidia | video_driver | - | |
| nexus_9 | - | ||
| pixel_c | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nvidia:shield_tablet_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0750A91D-C568-49C4-86E0-D9DA075BA33D",
"versionEndIncluding": "4.3.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:shield_tablet:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A28C0ED3-654C-4783-B8A0-67D7C3D1FE9A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nvidia:shield_tablet_tk1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D103EA4F-A03D-487F-8686-838078B78199",
"versionEndIncluding": "1.4.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:shield_tablet_tk1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "845E4A71-7181-4AB6-9ADF-43ABC6C9A785",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nvidia:shield_tv_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8D495631-CFF4-46B5-AAAE-3E51717C1337",
"versionEndIncluding": "3.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:shield_tv:-:*:*:*:*:*:*:*",
"matchCriteriaId": "49F85C44-6B7E-4B7C-AC8D-9D5727DFA0B8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:nvidia:video_driver:-:*:*:*:*:android:*:*",
"matchCriteriaId": "C162AD10-3322-4317-B808-B6B517576F66",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:google:nexus_9:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1018566D-5DBE-44BD-BA05-1F6A6375C32F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9526852E-8BF4-42AA-A9BC-84FEC564B871",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5."
},
{
"lang": "es",
"value": "Desbordamiento de b\u00fafer en nvhost_job.c en el video driver NVIDIA video para Android, Shield TV en versiones anteriores a OTA 3.3, Shield Table en versiones anteriores a OTA 4.4, y Shield Table TK1 en versiones anteriores a OTA 1.5."
}
],
"id": "CVE-2016-6917",
"lastModified": "2024-11-21T02:57:05.900",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2017-04-24T19:59:00.457",
"references": [
{
"source": "cve@mitre.org",
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/94667"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://source.android.com/security/bulletin/2016-12-01"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/94667"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://source.android.com/security/bulletin/2016-12-01"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-119"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2024-10-25 11:15
Modified
2024-10-28 21:35
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
5.1 (Medium) - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
5.1 (Medium) - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Summary
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-331255656.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| dsap-vuln-management@google.com | https://source.android.com/security/bulletin/pixel/2024-10-01 | Vendor Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| android | * | ||
| pixel | - | ||
| pixel_2 | - | ||
| pixel_2_xl | - | ||
| pixel_3 | - | ||
| pixel_3_xl | - | ||
| pixel_3a | - | ||
| pixel_3a_xl | - | ||
| pixel_4 | - | ||
| pixel_4_xl | - | ||
| pixel_4a | - | ||
| pixel_4a_5g | - | ||
| pixel_5 | - | ||
| pixel_5a | - | ||
| pixel_6 | - | ||
| pixel_6_pro | - | ||
| pixel_6a | - | ||
| pixel_7 | - | ||
| pixel_7_pro | - | ||
| pixel_7a | - | ||
| pixel_8 | - | ||
| pixel_8_pro | - | ||
| pixel_8a | - | ||
| pixel_9 | - | ||
| pixel_9_pro | - | ||
| pixel_9_pro_fold | - | ||
| pixel_c | - | ||
| pixel_fold | - | ||
| pixel_pro_xl | - | ||
| pixel_slate | - | ||
| pixel_tablet | - | ||
| pixel_xl | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C1716AE3-39FD-430C-9B82-FDDEB29775B8",
"versionEndExcluding": "2024-10-05",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:google:pixel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B17D3A78-87DD-44CD-AB11-3E42AEB1A1D9",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6B76B2AD-52E2-41D2-82D7-557DC32E064F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_2_xl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "50F1BE2A-DC55-4AC2-8272-FC793CB93B48",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "95B55D72-61F8-4957-9C3D-8009C6966F40",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_3_xl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "128E8B67-E19C-4C1A-B7FB-081ACDB243C1",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_3a:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4F56191C-4FF1-4309-9169-AA83CF2F23F6",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_3a_xl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AD59B24F-5624-4BCB-985A-2CC9987EA69C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_4:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B8EFE6CB-CAFD-4F38-8548-A19A0FBFECC6",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_4_xl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B8BF63E4-BD56-40F9-AA33-5EB5D1D2A7BE",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_4a:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8E49FC5D-ACC7-498F-88E9-293AB276CF63",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_4a_5g:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C3936C02-6FC1-4B53-A54E-C49DBEFBC17A",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_5:-:*:*:*:*:*:*:*",
"matchCriteriaId": "821F3393-1034-4812-A091-D753EDA59E60",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_5a:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9FD673E4-9A74-4029-9E99-F741711A529C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_6:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C27C4FD0-E67A-4D54-A00A-BDD59AAABB4F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_6_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2FBDD7EC-7E2D-4703-9CE8-8B2422146F6D",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_6a:-:*:*:*:*:*:*:*",
"matchCriteriaId": "99FFC9C6-24A6-4479-8DA1-93DA62C89048",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_7:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6C1347ED-56D0-4AF8-92D8-D4E427B5A1CA",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_7_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "23904900-3001-4EA1-9A6C-C8F7EB2D3C42",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_7a:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C74EE811-A472-4509-A52F-34EE65FEDE7B",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_8:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7669A258-53B3-4599-B304-A99C47278583",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_8_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4E43578F-1598-4343-AC12-B71DE4E33C50",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_8a:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BF365A22-58DA-4D98-ADF0-FFD566BD62B5",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_9:-:*:*:*:*:*:*:*",
"matchCriteriaId": "58D7038F-BF44-45ED-8C35-6DD98D72A043",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_9_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3E0889AF-7B08-42CE-A721-87D99B9F27CF",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_9_pro_fold:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3485B56E-3A9C-4960-B58E-CE5291BD66CD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9526852E-8BF4-42AA-A9BC-84FEC564B871",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_fold:-:*:*:*:*:*:*:*",
"matchCriteriaId": "05242EED-D230-4968-A0B1-1472D6D645D4",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_pro_xl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2F0EF14B-06EF-4229-8364-7049A6E53D32",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_slate:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3A412160-3367-4945-BD00-A0D730C271CD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_tablet:-:*:*:*:*:*:*:*",
"matchCriteriaId": "831D6339-087B-4CFA-9AF7-FBE6FB5F7E00",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_xl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1674845A-B3D0-43E2-98FC-06E29A3C6A77",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-331255656."
},
{
"lang": "es",
"value": "Android anterior al 2024-10-05 en los dispositivos Google Pixel permite la divulgaci\u00f3n de informaci\u00f3n en el componente ACPM, A-331255656."
}
],
"id": "CVE-2024-47022",
"lastModified": "2024-10-28T21:35:18.190",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.4,
"impactScore": 3.6,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
},
"published": "2024-10-25T11:15:16.950",
"references": [
{
"source": "dsap-vuln-management@google.com",
"tags": [
"Vendor Advisory"
],
"url": "https://source.android.com/security/bulletin/pixel/2024-10-01"
}
],
"sourceIdentifier": "dsap-vuln-management@google.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2017-04-24 20:59
Modified
2024-11-21 02:57
Severity ?
Summary
Stack-based buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| nvidia | shield_tablet_firmware | * | |
| nvidia | shield_tablet | - | |
| nvidia | shield_tablet_tk1_firmware | * | |
| nvidia | shield_tablet_tk1 | - | |
| nvidia | shield_tv_firmware | * | |
| nvidia | shield_tv | - | |
| nvidia | video_driver | - | |
| nexus_9 | - | ||
| pixel_c | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nvidia:shield_tablet_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0750A91D-C568-49C4-86E0-D9DA075BA33D",
"versionEndIncluding": "4.3.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:shield_tablet:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A28C0ED3-654C-4783-B8A0-67D7C3D1FE9A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nvidia:shield_tablet_tk1_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D103EA4F-A03D-487F-8686-838078B78199",
"versionEndIncluding": "1.4.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:shield_tablet_tk1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "845E4A71-7181-4AB6-9ADF-43ABC6C9A785",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:nvidia:shield_tv_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8D495631-CFF4-46B5-AAAE-3E51717C1337",
"versionEndIncluding": "3.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:shield_tv:-:*:*:*:*:*:*:*",
"matchCriteriaId": "49F85C44-6B7E-4B7C-AC8D-9D5727DFA0B8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:nvidia:video_driver:-:*:*:*:*:android:*:*",
"matchCriteriaId": "C162AD10-3322-4317-B808-B6B517576F66",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:google:nexus_9:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1018566D-5DBE-44BD-BA05-1F6A6375C32F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:google:pixel_c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9526852E-8BF4-42AA-A9BC-84FEC564B871",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Stack-based buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5."
},
{
"lang": "es",
"value": "Desbordamiento de b\u00fafer basado en la pila en nvhost_job.c en el controlador de v\u00eddeo NVIDIA para Android, Shield TV versiones anteriores de OTA 3.3, Shield Table versiones anteriores de OTA 4.4 y Shield Table TK1 versiones anteriores de OTA 1.5."
}
],
"id": "CVE-2016-6915",
"lastModified": "2024-11-21T02:57:05.563",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2017-04-24T20:59:00.147",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in"
},
{
"source": "cve@mitre.org",
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/94667"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://source.android.com/security/bulletin/2016-12-01"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/94667"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://source.android.com/security/bulletin/2016-12-01"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-119"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
cve-2016-6915
Vulnerability from cvelistv5
Published
2017-04-24 20:00
Modified
2024-08-06 01:43
Severity ?
EPSS score ?
Summary
Stack-based buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5.
References
| ▼ | URL | Tags |
|---|---|---|
| https://source.android.com/security/bulletin/2016-12-01 | x_refsource_CONFIRM | |
| http://www.securityfocus.com/bid/94667 | vdb-entry, x_refsource_BID | |
| http://nvidia.custhelp.com/app/answers/detail/a_id/4561 | x_refsource_CONFIRM | |
| http://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in | x_refsource_CONFIRM |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T01:43:38.621Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://source.android.com/security/bulletin/2016-12-01"
},
{
"name": "94667",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/94667"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-12-05T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Stack-based buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-10-18T17:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://source.android.com/security/bulletin/2016-12-01"
},
{
"name": "94667",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/94667"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2016-6915",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Stack-based buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://source.android.com/security/bulletin/2016-12-01",
"refsource": "CONFIRM",
"url": "https://source.android.com/security/bulletin/2016-12-01"
},
{
"name": "94667",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/94667"
},
{
"name": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
"refsource": "CONFIRM",
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
},
{
"name": "http://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in",
"refsource": "CONFIRM",
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2016-6915",
"datePublished": "2017-04-24T20:00:00",
"dateReserved": "2016-08-23T00:00:00",
"dateUpdated": "2024-08-06T01:43:38.621Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2016-6916
Vulnerability from cvelistv5
Published
2017-04-24 19:00
Modified
2024-08-06 01:43
Severity ?
EPSS score ?
Summary
Integer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5 allows local users to cause a denial of service (system crash) via unspecified vectors, which triggers a buffer overflow.
References
| ▼ | URL | Tags |
|---|---|---|
| https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in | x_refsource_CONFIRM | |
| https://source.android.com/security/bulletin/2016-12-01 | x_refsource_CONFIRM | |
| http://www.securityfocus.com/bid/94667 | vdb-entry, x_refsource_BID | |
| http://nvidia.custhelp.com/app/answers/detail/a_id/4561 | x_refsource_CONFIRM |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T01:43:38.435Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://source.android.com/security/bulletin/2016-12-01"
},
{
"name": "94667",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/94667"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-12-05T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Integer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5 allows local users to cause a denial of service (system crash) via unspecified vectors, which triggers a buffer overflow."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-10-18T17:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://source.android.com/security/bulletin/2016-12-01"
},
{
"name": "94667",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/94667"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2016-6916",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Integer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5 allows local users to cause a denial of service (system crash) via unspecified vectors, which triggers a buffer overflow."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in",
"refsource": "CONFIRM",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in"
},
{
"name": "https://source.android.com/security/bulletin/2016-12-01",
"refsource": "CONFIRM",
"url": "https://source.android.com/security/bulletin/2016-12-01"
},
{
"name": "94667",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/94667"
},
{
"name": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
"refsource": "CONFIRM",
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2016-6916",
"datePublished": "2017-04-24T19:00:00",
"dateReserved": "2016-08-23T00:00:00",
"dateUpdated": "2024-08-06T01:43:38.435Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2024-44100
Vulnerability from cvelistv5
Published
2024-10-25 10:34
Modified
2024-10-25 18:46
Severity ?
EPSS score ?
Summary
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545.
References
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:google:android:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "android",
"vendor": "google",
"versions": [
{
"status": "affected",
"version": "android_kernel"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-44100",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-10-25T18:43:22.487800Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-276",
"description": "CWE-276 Incorrect Default Permissions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-10-25T18:46:51.786Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Android",
"vendor": "Google",
"versions": [
{
"status": "affected",
"version": "Android kernel"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Information disclosure",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-10-25T13:37:00.000Z",
"orgId": "83238938-5644-45f0-9007-c0392bcf6222",
"shortName": "Google_Devices"
},
"references": [
{
"url": "https://source.android.com/security/bulletin/pixel/2024-10-01"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "83238938-5644-45f0-9007-c0392bcf6222",
"assignerShortName": "Google_Devices",
"cveId": "CVE-2024-44100",
"datePublished": "2024-10-25T10:34:03.553Z",
"dateReserved": "2024-08-19T16:32:38.651Z",
"dateUpdated": "2024-10-25T18:46:51.786Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2024-47020
Vulnerability from cvelistv5
Published
2024-10-25 10:34
Modified
2024-10-28 20:19
Severity ?
EPSS score ?
Summary
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488.
References
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-47020",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-10-28T17:20:32.373490Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-10-28T20:19:11.314Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Android",
"vendor": "Google",
"versions": [
{
"status": "affected",
"version": "Android kernel"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Information disclosure",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-10-25T13:37:00.000Z",
"orgId": "83238938-5644-45f0-9007-c0392bcf6222",
"shortName": "Google_Devices"
},
"references": [
{
"url": "https://source.android.com/security/bulletin/pixel/2024-10-01"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "83238938-5644-45f0-9007-c0392bcf6222",
"assignerShortName": "Google_Devices",
"cveId": "CVE-2024-47020",
"datePublished": "2024-10-25T10:34:05.317Z",
"dateReserved": "2024-09-16T18:51:44.743Z",
"dateUpdated": "2024-10-28T20:19:11.314Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2016-2459
Vulnerability from cvelistv5
Published
2016-05-09 10:00
Modified
2024-08-05 23:32
Severity ?
EPSS score ?
Summary
mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, related to IGraphicBufferConsumer.cpp and IGraphicBufferProducer.cpp, aka internal bug 27556038.
References
| ▼ | URL | Tags |
|---|---|---|
| http://source.android.com/security/bulletin/2016-05-01.html | x_refsource_CONFIRM | |
| https://android.googlesource.com/platform/frameworks/native/+/a30d7d90c4f718e46fb41a99b3d52800e1011b73 | x_refsource_CONFIRM |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T23:32:20.151Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://source.android.com/security/bulletin/2016-05-01.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://android.googlesource.com/platform/frameworks/native/+/a30d7d90c4f718e46fb41a99b3d52800e1011b73"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-05-02T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, related to IGraphicBufferConsumer.cpp and IGraphicBufferProducer.cpp, aka internal bug 27556038."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-05-09T06:57:01",
"orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
"shortName": "google_android"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://source.android.com/security/bulletin/2016-05-01.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://android.googlesource.com/platform/frameworks/native/+/a30d7d90c4f718e46fb41a99b3d52800e1011b73"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@android.com",
"ID": "CVE-2016-2459",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, related to IGraphicBufferConsumer.cpp and IGraphicBufferProducer.cpp, aka internal bug 27556038."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://source.android.com/security/bulletin/2016-05-01.html",
"refsource": "CONFIRM",
"url": "http://source.android.com/security/bulletin/2016-05-01.html"
},
{
"name": "https://android.googlesource.com/platform/frameworks/native/+/a30d7d90c4f718e46fb41a99b3d52800e1011b73",
"refsource": "CONFIRM",
"url": "https://android.googlesource.com/platform/frameworks/native/+/a30d7d90c4f718e46fb41a99b3d52800e1011b73"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
"assignerShortName": "google_android",
"cveId": "CVE-2016-2459",
"datePublished": "2016-05-09T10:00:00",
"dateReserved": "2016-02-18T00:00:00",
"dateUpdated": "2024-08-05T23:32:20.151Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2016-6917
Vulnerability from cvelistv5
Published
2017-04-24 19:00
Modified
2024-08-06 01:43
Severity ?
EPSS score ?
Summary
Buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5.
References
| ▼ | URL | Tags |
|---|---|---|
| https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in | x_refsource_CONFIRM | |
| https://source.android.com/security/bulletin/2016-12-01 | x_refsource_CONFIRM | |
| http://www.securityfocus.com/bid/94667 | vdb-entry, x_refsource_BID | |
| http://nvidia.custhelp.com/app/answers/detail/a_id/4561 | x_refsource_CONFIRM |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T01:43:38.618Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://source.android.com/security/bulletin/2016-12-01"
},
{
"name": "94667",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/94667"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-12-05T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-10-18T17:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://source.android.com/security/bulletin/2016-12-01"
},
{
"name": "94667",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/94667"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2016-6917",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in",
"refsource": "CONFIRM",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in"
},
{
"name": "https://source.android.com/security/bulletin/2016-12-01",
"refsource": "CONFIRM",
"url": "https://source.android.com/security/bulletin/2016-12-01"
},
{
"name": "94667",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/94667"
},
{
"name": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
"refsource": "CONFIRM",
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2016-6917",
"datePublished": "2017-04-24T19:00:00",
"dateReserved": "2016-08-23T00:00:00",
"dateUpdated": "2024-08-06T01:43:38.618Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2024-47022
Vulnerability from cvelistv5
Published
2024-10-25 10:34
Modified
2024-10-28 20:17
Severity ?
EPSS score ?
Summary
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-331255656.
References
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "android",
"vendor": "google",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:google:pixel:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "pixel",
"vendor": "google",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-47022",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-10-28T17:19:59.091043Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-10-28T20:17:19.827Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Android",
"vendor": "Google",
"versions": [
{
"status": "affected",
"version": "Android kernel"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-331255656."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Information disclosure",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-10-25T13:37:00.000Z",
"orgId": "83238938-5644-45f0-9007-c0392bcf6222",
"shortName": "Google_Devices"
},
"references": [
{
"url": "https://source.android.com/security/bulletin/pixel/2024-10-01"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "83238938-5644-45f0-9007-c0392bcf6222",
"assignerShortName": "Google_Devices",
"cveId": "CVE-2024-47022",
"datePublished": "2024-10-25T10:34:05.677Z",
"dateReserved": "2024-09-16T19:14:14.859Z",
"dateUpdated": "2024-10-28T20:17:19.827Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}