VULNERABILITY INTELLIGENCE
CVE-2019-5679
CVSS score7.8 HIGH
EPSS probability0.40%
CISA KEVNot currently listed
Published2019-08-06
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
NVIDIA Shield TV Experience prior to v8.0, NVIDIA Tegra bootloader contains a vulnerability in nvtboot where the Trusted OS image is improperly authenticated, which may lead to code execution, denial of service, escalation of privileges, and information disclosure, code execution, denial of service, or escalation of privileges
Weakness classification
- CWE-287: Improper Authentication
Primary references
- psirt@nvidia.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory