Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

NVIDIA Tegra X1 firmware may let attackers gain privileges

CVE-2017-0866 · published 8 years ago
Summary

The Tegra X1 firmware used in some devices can be tricked by malicious input, leading to corruption of the core operating system memory. This could allow an attacker to run their own code with system-level rights. Apply the latest firmware updates from the device manufacturer to protect against this risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
nvidia tegra_x1_firmware All versions
cpe:2.3:o:nvidia:tegra_x1_firmware:-:*:*:*:*:*:*:*
Original advisory text
An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspace is passed as a pointer to kfree. This could lead to ker...
An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspace is passed as a pointer to kfree. This could lead to kernel memory corruption and possible code execution. This issue is rated as moderate. Product: Pixel. Version: N/A. Android ID: A-38415808. References: N-CVE-2017-0866.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published16 Nov 2017
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-0866 · NVD
Track software like this
Free during beta