CVE-2017-6289 — In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment (TEE) contains a memory corruption (due to unusual root cause) vulnerability, which if run within the speculative execution of the TEE, may lead to local escalation of privileges

Back Back to CVE browser

HIGH

In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment (TEE) contains a memory corruption (due to unusual root cause) vulnerability, which if run within the speculative execution of the TEE, may lead to local escalation of privileges

Published May 10, 2018

7.8

HIGH

CVSS 3.0

EPSS 0.17%

Description

In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment (TEE) contains a memory corruption (due to unusual root cause) vulnerability, which if run within the speculative execution of the TEE, may lead to local escalation of privileges. This issue is rated as critical. Android: A-72830049. Reference: N-CVE-2017-6289.

Affected products

Vendor Nvidia Corporation Product Android Default
n/a
- Version
  NA
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Nvidia Corporation

Android

n/a

Version	Status	Constraints
NA	affected	-

Remediation

No remediation recorded yet.

Metrics

0.17% 0.00168

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00168

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Table of values (8 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.17% (0.00168)	5.51th	v5 (v2026.06.15)
Sep 20, 2026	0.17% (0.00168)	6.57th	v5 (v2026.06.15)
Jul 20, 2024	0.04% (0.00042)	5.06th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00042)	5.63th	v3 (v2023.03.01)
Mar 6, 2023	1.10% (0.01102)	53.65th	v2 (v2022.01.01)
Feb 4, 2022	1.00% (0.01005)	17.93th	v2 (v2022.01.01)
Feb 3, 2022	0.20% (0.00197)	1.29th	v5 (v2026.06.15)
Apr 14, 2021	0.20% (0.00197)	0.00th	v1

Weaknesses (1)

CWE-119

Buffer Overflow

References (2)

http://www.securityfocus.com/bid/104145
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://source.android.com/security/bulletin/2018-05-01
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/104145		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://source.android.com/security/bulletin/2018-05-01		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner nvidia

Published May 10, 2018

Updated Sep 17, 2024

Reserved Feb 23, 2017

Link CVE-2017-6289

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-6289

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-6289