CVE-2018-6242(nvidia / tegra_bootrom_rcm)
LOWCVSS 6.8 · MEDIUMImmediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery Mode (RCM). An attacker with physical access to the device's USB and the ability to force the device to reboot into RCM could exploit the vulnerability to execute unverified code.
0.0/ 10 priority
Sources & remediation
Vendor / third-party advisories
Weakness type (CWE)
CWE-119
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- tegra_bootrom_rcm
- tegra_mobile_processor
Affected systems
Vendors
Products
tegra_bootrom_rcmtegra_mobile_processor
1 version affected across 2 products
Deep dive
CPE platform detail2 entries
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nvidia | tegra_bootrom_rcm | - | - | - |
| HW | nvidia | tegra_mobile_processor | - | - | - |