Vulnerability · NVD
CVE-2016-6916
CRITICAL 7.8
Vendor bulletin scale — NVD CVSS pending
Integer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5 allows local users to cause a denial of service (system crash) via unspecified vectors, which triggers a buffer overflow.
Attack vector : Local
No user interaction
Show raw CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.42%
exploit very unlikely
percentile 34.9%
OS versions that fix this CVE
This CVE is resolved by the following OS security releases. Update the OS to at least the listed version.
- Android Fixed in December 2016 patch level
Vulnerable CPE configurations (1)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
| nvidia |
video_driver Android
|
Android | — | cpe:2.3:a:nvidia:video_driver:-:*:*:*:*:android:*:* |