N-day Nvidia, Android driver security flaw details revealed

  • 25 April 2017
  • 0 replies
  • 193 views

Userlevel 7
Badge +54
Zimperium has revealed the details of two N-day vulnerabilities submitted through its exploit acquisition scheme.
 By Charlie Osborne for Zero Day | April 25, 2017
 
The technical details of security vulnerabilities impacting the Nvidia Video and an Android driver have been revealed by Zimperium, which acquired the flaws as part of an exploit acquisition program.
 
On Tuesday, Zimperium zLabs researchers published a blog post detailing the security flaws, two escalation of privilege bugs found within the NVIDIA Video driver and MSM Thermal driver.
 
The Nvidia bug, CVE-2016-2435, impacts Android 6.0 on the Nexus 9 handset. The problem arises when attackers craft an application to tamper with read/write memory values and force privilege escalation.
 
Full Article

0 replies

Be the first to reply!

Reply