CVE-2018-6242

Severity: medium (CVSS 6.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-05-01 · updated 2026-06-17
Weakness: CWE-119

Description

Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery Mode (RCM). An attacker with physical access to the device's USB and the ability to force the device to reboot into RCM could exploit the vulnerability to execute unverified code.

Affected products

Nvidia Corporation Some NVIDIA Tegra Mobile Processors: all versions

References

http://nvidia.custhelp.com/app/answers/detail/a_id/4660
http://nvidia.custhelp.com/app/answers/detail/a_id/4660

Get alerted when CVE-2018-6242 or the next vulnerability affects your stack