Natecray

**Name of the Vulnerable Software and Affected Versions** Qualcomm products with Android releases from CAF using the Linux kernel (affected versions not specified) **Description** The issue allows kernel memory contents to leak to system logs if a userspace string is not NULL-terminated. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android (affected versions not specified) **Description** A race condition exists in a QTEE driver in the Linux kernel used by Android releases from CAF, potentially leading to an arbitrary memory write. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NVIDIA video driver versions prior to the fixed version **Description** The issue is related to insufficient access control in the NVIDIA video driver for the Android operating system. It allows a remote attacker to execute arbitrary code within the context of the kernel. This could lead to a local permanent device compromise, requiring reflashing the operating system to repair the device. **Recommendations** For versions prior to the fixed version, consider restricting access to the kernel until a patch is available. As a temporary workaround, avoid using the NVIDIA video driver until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NVIDIA video driver for Android versions prior to OTA 3.3 Shield TV versions prior to OTA 3.3 Shield Table versions prior to OTA 4.4 Shield Table TK1 versions prior to OTA 1.5 **Description** A buffer overflow issue exists in the nvhost job.c file of the NVIDIA video driver for Android. This issue may be exploited in real-world attacks, although specific details about such incidents are not provided. **Recommendations** For NVIDIA video driver for Android versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield TV versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield Table versions prior to OTA 4.4, update to OTA 4.4 or later. For Shield Table TK1 versions prior to OTA 1.5, update to OTA 1.5 or later.

**Name of the Vulnerable Software and Affected Versions** NVIDIA video driver for Android versions prior to OTA 3.3 Shield TV versions prior to OTA 3.3 Shield Table versions prior to OTA 4.4 Shield Table TK1 versions prior to OTA 1.5 **Description** A stack-based buffer overflow issue exists in the nvhost job.c file of the NVIDIA video driver for Android. This issue may be exploited in real-world attacks, although specific details about such incidents are not provided. The estimated number of potentially affected devices worldwide is not available. **Recommendations** For NVIDIA video driver for Android versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield TV versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield Table versions prior to OTA 4.4, update to OTA 4.4 or later. For Shield Table TK1 versions prior to OTA 1.5, update to OTA 1.5 or later.

**Name of the Vulnerable Software and Affected Versions** NVIDIA video driver for Android versions prior to OTA 3.3 Shield TV versions prior to OTA 3.3 Shield Table versions prior to OTA 4.4 Shield Table TK1 versions prior to OTA 1.5 **Description** The issue is related to an integer overflow in the `nvhost job.c` file of the NVIDIA video driver for Android. This overflow can lead to a buffer overflow, causing a denial of service, which results in a system crash. The exact vectors that trigger this issue are not specified. **Recommendations** For NVIDIA video driver for Android versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield TV versions prior to OTA 3.3, update to OTA 3.3 or later. For Shield Table versions prior to OTA 4.4, update to OTA 4.4 or later. For Shield Table TK1 versions prior to OTA 1.5, update to OTA 1.5 or later.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to the fixed version **Description** The issue is related to an elevation of privilege vulnerability in the NVIDIA crypto driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This problem is rated as High because it first requires compromising a privileged process. **Recommendations** For Android versions prior to the fixed version, update to a version that includes the fix for this issue to prevent potential exploitation. As a temporary workaround, consider restricting access to the NVIDIA crypto driver until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-08-05 on Nexus 9 devices **Description** The issue is related to the NVIDIA media driver in Android, which has inadequate access control. This allows attackers to gain privileges via a crafted application. **Recommendations** For Android versions prior to 2016-08-05 on Nexus 9 devices, update the system to a version released after 2016-08-05 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** NVIDIA media driver versions prior to 2016-08-05 **Description** The issue is related to insufficient access control in the NVIDIA media driver for the Android operating system. It can be exploited by a local attacker using a specially crafted application to elevate their privileges. **Recommendations** For versions prior to 2016-08-05, update the NVIDIA media driver to a version released after 2016-08-05 to resolve the issue.