{"id":"CVE-2017-6276","aliases":["EUVD-2017-15337","GHSA-8rvv-wcx9-q5mr"],"status":"published","title":"NVIDIA mediaserver contains a vulnerability where it is possible a use after free malfunction can...","description":"NVIDIA mediaserver contains a vulnerability where it is possible a use after free malfunction can occur due to an incorrect bounds check which could enable unauthorized code execution and possibly lead to elevation of privileges. This issue is rated as high. Product: Android. Version: N/A. Android: A-63802421. References: N-CVE-2017-6276.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00189,"percentile":0.08548,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-416"],"published":"2017-12-06T18:00:00Z","modified":"2026-06-17T01:22:03Z","products":[{"vendor":"google","product":"android"},{"vendor":"nvidia corporation","product":"android"}],"references":[{"url":"http://www.securityfocus.com/bid/102106","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://source.android.com/security/bulletin/2017-12-01","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-6276"},{"url":"https://github.com/advisories/GHSA-8rvv-wcx9-q5mr"}],"sources":{"cve":[{"id":"CVE-2017-6276","description":"NVIDIA mediaserver contains a vulnerability where it is possible a use after free malfunction can occur due to an incorrect bounds check which could enable unauthorized code execution and possibly lead to elevation of privileges. This issue is rated as high. Product: Android. Version: N/A. Android: A-63802421. References: N-CVE-2017-6276.","status":"published","published":"2017-12-06T18:00:00Z","modified":"2024-09-16T23:46:13.229Z","updated_at":"2026-11-02T14:33:16.916541Z"}],"euvd":[{"id":"EUVD-2017-15337","description":"NVIDIA mediaserver contains a vulnerability where it is possible a use after free malfunction can occur due to an incorrect bounds check which could enable unauthorized code execution and possibly lead to elevation of privileges. This issue is rated as high. Product: Android. Version: N/A. Android: A-63802421. References: N-CVE-2017-6276.","status":"published","published":"2017-12-06T18:00:00Z","modified":"2024-09-16T23:46:13Z","updated_at":"2026-11-03T00:54:46.734285Z"}],"ghsa":[{"id":"GHSA-8rvv-wcx9-q5mr","title":"NVIDIA mediaserver contains a vulnerability where it is possible a use after free malfunction can...","description":"NVIDIA mediaserver contains a vulnerability where it is possible a use after free malfunction can occur due to an incorrect bounds check which could enable unauthorized code execution and possibly lead to elevation of privileges. This issue is rated as high. Product: Android. Version: N/A. Android: A-63802421. References: N-CVE-2017-6276.","status":"published","published":"2022-05-17T00:11:43Z","modified":"2023-02-03T05:01:10Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:52:55.451166Z"}],"nvd":[{"id":"CVE-2017-6276","description":"NVIDIA mediaserver contains a vulnerability where it is possible a use after free malfunction can occur due to an incorrect bounds check which could enable unauthorized code execution and possibly lead to elevation of privileges. This issue is rated as high. Product: Android. Version: N/A. Android: A-63802421. References: N-CVE-2017-6276.","status":"published","published":"2017-12-06T18:29:00.297Z","modified":"2026-06-17T01:22:03.2Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:04:10.156892Z"}]}}