CVE-2017-0866

An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspace is passed as a pointer to kfree. This could lead to kernel memory corruption and possible code execution. This issue is rated as moderate. Product: Pixel. Version: N/A. Android ID: A-38415808. References: N-CVE-2017-0866.

Score

CVSS 3.0 7.8 High

Status

Modified - security@android.com

Published

2017-11-16

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• Tegra X1 Firmware (Nvidia)

References

• https://source.android.com/security/bulletin/pixel/2017-11-01#announcements