CVE-2018-6243

NVIDIA Tegra TLK Widevine Trust Application contains a vulnerability in which missing the input parameter checking of video metadata count may lead to Arbitrary Code Execution, Denial of Service or Escalation of Privileges. Android ID: A-72315075. Severity Rating: High. Version: N/A.

Score

CVSS 3.0 7.8 High

Status

Modified - psirt@nvidia.com

Published

2019-05-07

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Android (Google)
• Tegra Tlk Widevine Trust Application (Nvidia)

References

• http://www.securityfocus.com/bid/108287
• https://source.android.com/security/bulletin/2019-05-01