Vulnerability Details : CVE-2019-5699
NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra bootloader contains a vulnerability where the software performs an incorrect bounds check, which may lead to buffer overflow resulting in escalation of privileges and code execution. escalation of privileges, and information disclosure, code execution, denial of service, or escalation of privileges.
Vulnerability category: OverflowDenial of serviceInformation leak
Products affected by CVE-2019-5699
- cpe:2.3:a:nvidia:shield_experience:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-5699
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 10 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-5699
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST | |
|
7.8
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST |
CWE ids for CVE-2019-5699
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2019-5699
-
https://nvidia.custhelp.com/app/answers/detail/a_id/4875
Security Bulletin: NVIDIA SHIELD TV - October 2019 | NVIDIAVendor Advisory
-
https://nvidia.custhelp.com/app/answers/detail/a_id/4910
Security Bulletin: Jetson AGX Xavier, TK1, TX1, TX2, and Nano L4T- December 2019 | NVIDIA
Jump to