Vulnerability · Published Sep 20, 2023 · Assigned by nvidia
CVE-2023-31014
Medium 4.2
In plain English
A medium-severity security flaw in GeForce NOW for Android mobile and TV app from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer component. A successful exploit of this vulnerability may lead to limited information disclosure, denial of service, and code execution.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| NVIDIA | GeForce NOW for Android mobile and TV app | 6.00.32705137 to 6.04.33108832 |
Weakness: CWE-927 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L