1. Home
  2. CVE Database
  3. CVE-2017-0866
HIGH · 7.8

CVE-2017-0866

An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspace is passed as a pointer to kfree. This could lead to kernel...

Vulnerability Description

An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspace is passed as a pointer to kfree. This could lead to kernel memory corruption and possible code execution. This issue is rated as moderate. Product: Pixel. Version: N/A. Android ID: A-38415808. References: N-CVE-2017-0866.

CVSS Score

7.8

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NvidiaTegra X1 Firmware-
NvidiaTegra X1-

Related Weaknesses (CWE)

CWE-119

References

FAQ

What is CVE-2017-0866?

CVE-2017-0866 is a vulnerability with a CVSS score of 7.8 (HIGH). An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspace is passed as a pointer to kfree. This could lead to kernel...

How severe is CVE-2017-0866?

CVE-2017-0866 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-0866?

Check the references section above for vendor advisories and patch information. Affected products include: Nvidia Tegra X1 Firmware, Nvidia Tegra X1.