CVE-2017-6282: google android Write-what-where Condition

Vulnerability summary

CVE-2017-6282 is a high (CVSS 7.8) Write-what-where Condition vulnerability in google android. EPSS estimates a 0.15% chance of exploitation in the next 30 days, higher than 3.5% of scored vulnerabilities.

Timeline

1. 06-03-2018
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary value to an arbitrary location which may lead to an escalation of privileges. This issue is rated as high.

• CWE-123Write-what-where ConditionAny condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.