CVE-2017-6289

Name of the Vulnerable Software and Affected Versions Android versions prior to the 2018-05-05 security patch level

Description The issue is related to a memory corruption vulnerability in the NVIDIA Trusted Execution Environment (TEE) component of the Android operating system. This vulnerability may lead to local escalation of privileges if exploited within the speculative execution of the TEE. The issue is rated as critical.

Recommendations For Android versions prior to the 2018-05-05 security patch level, update to a version that includes the 2018-05-05 security patch level or later to resolve the issue. As a temporary workaround, consider restricting access to the TEE component to minimize the risk of exploitation.