In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment (TEE) contains a memory corruption (due to unusual root cause) vulnerability, which if run within the speculative execution of the TEE, may lead to local escalation of privileges. This issue is rated as critical. Android: A-72830049. Reference: N-CVE-2017-6289.
References
Link | Resource |
---|---|
https://source.android.com/security/bulletin/2018-05-01 | Vendor Advisory |
http://www.securityfocus.com/bid/104145 | Third Party Advisory VDB Entry |
Configurations
Information
Published : 2018-05-10 07:29
Updated : 2019-10-02 17:03
NVD link : CVE-2017-6289
Mitre link : CVE-2017-6289
JSON object : View
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
Products Affected
- android