SB2023082906 - Code execution in NVIDIA GeForce NOW for Android
Published: August 29, 2023
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Use of Implicit Intent for Sensitive Communication (CVE-ID: CVE-2023-31014)
The vulnerability allows a local user to execute arbitrary code on the target system.
The vulnerability exists due to use of implicit intent for sensitive communication in the game launcher component. A local user can execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Remediation
Install update from vendor's website.