VULNERABILITY INTELLIGENCE

CVE-2018-6243

CVSS score7.8 HIGH
EPSS probability0.19%
CISA KEVNot currently listed
Published2019-05-07
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

NVIDIA Tegra TLK Widevine Trust Application contains a vulnerability in which missing the input parameter checking of video metadata count may lead to Arbitrary Code Execution, Denial of Service or Escalation of Privileges. Android ID: A-72315075. Severity Rating: High. Version: N/A.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references