PT-2017-1005
CVE-2016-8435
·
Publicado
2017-01-12
·
Atualizado
2017-01-18
Descrição por
CVSS 2.0
9.3
AltaMétricasAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Android versions Kernel-3.18
Description
The issue is related to an elevation of privilege vulnerability in the NVIDIA GPU driver, which is due to inadequate access control. This vulnerability can be exploited by a remote attacker to execute arbitrary code within the context of the kernel, potentially leading to a local permanent device compromise. The compromise may require reflashing the operating system to repair the device.
Recommendations
For Android versions Kernel-3.18, consider restricting access to the NVIDIA GPU driver as a temporary workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾