CVE-2018-6243

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-05-07 · updated 2026-06-17
Weakness: CWE-20

Description

NVIDIA Tegra TLK Widevine Trust Application contains a vulnerability in which missing the input parameter checking of video metadata count may lead to Arbitrary Code Execution, Denial of Service or Escalation of Privileges. Android ID: A-72315075. Severity Rating: High. Version: N/A.

Affected products

Android: all versions

References

http://www.securityfocus.com/bid/108287
https://source.android.com/security/bulletin/2019-05-01
http://www.securityfocus.com/bid/108287
https://source.android.com/security/bulletin/2019-05-01

Get alerted when CVE-2018-6243 or the next vulnerability affects your stack