PT-2019-17826 · Nvidia · Nvidia Tegra+1

Published 2019-10-09 · Updated 2019-12-05 · CVE-2019-5700

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Shield TV Experience versions prior to 8.0.1 NVIDIA Tegra software versions prior to 8.0.1

Description The issue is related to a vulnerability in the bootloader of the NVIDIA Tegra software, where it fails to validate the fields of the boot image. This may result in code execution, denial of service, escalation of privileges, and information disclosure.

Recommendations For NVIDIA Shield TV Experience versions prior to 8.0.1, update to version 8.0.1 or later to resolve the issue. For NVIDIA Tegra software versions prior to 8.0.1, update to version 8.0.1 or later to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2019-5700

Affected Products

Nvidia Shield Tv Experience

Nvidia Tegra

References · 5

• 🔥 https://github.com/oscardagrach/CVE-2019-5700 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-5700 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5700 · Vendor Advisory
• https://nvidia.custhelp.com/app/answers/detail/a_id/4875 · Vendor Advisory
• https://nvidia.custhelp.com/app/answers/detail/a_id/4910 · Note