Vulnerability Report

CVE-2016-6916

Title: Nvidia Shield Tv Memory Corruption

Memory Corruption

Proof Of Concept

No public PoC currently indexed for CVE-2016-6916.

CWE Category CWE-190

Published Date Apr 24, 2017

Modified Date Jun 17, 2026

Exploit Status Not Found

Score 7.8 CVSS v3.0

Exploit Probability (EPSS)

0.42%

Vulnerability Summary

CVE-2016-6916: Integer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5 allows local users to cause a denial of service (system crash) via unspecified vectors, which triggers a buffer overflow.

Impacted Vendors

nvidia 4

google 2

Reference Links

http://nvidia.custhelp.com/app/answers/detail/a_id/4561 http://www.securityfocus.com/bid/94667 https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in https://source.android.com/security/bulletin/2016-12-01 http://nvidia.custhelp.com/app/answers/detail/a_id/4561 http://www.securityfocus.com/bid/94667 https://nvidia.custhelp.com/app/answers/detail/a_id/4276/~/security-bulletin%3A-nvidia-shield-contains-multiple-vulnerabilities-in https://source.android.com/security/bulletin/2016-12-01

CVSS v3.0

Source Entity [email protected]

Severity HIGH

7.8

Attack Vector

LOCAL

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

Source Entity [email protected]

Severity HIGH

7.2

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:L/AC:L/Au:N/C:C/I:C/A:C

Associated Attack Patterns (CAPEC)

Total: Patterns