What is CVE-2019-5679?

CVE-2019-5679 is a high-severity vulnerability in Google Android, classified under Improper Authentication. CVSS score: 7.8/10. Published 2019-08-06.

How severe is CVE-2019-5679?

High severity. CVSS v3 base score is 7.8 out of 10.

Auth bypass in Google Android

CVE-2019-5679

NVIDIA Shield TV Experience prior to v8.0, NVIDIA Tegra bootloader contains a vulnerability in nvtboot where the Trusted OS image is improperly authenticated, which may lead to code execution, denial of service, escalation of privileges, and information disclosure, code execution, denial of service, or escalation of privileges

Vulnerability class: Broken Authentication

EPSS: 0.004 (32.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Google Android — versions 8.0, 8.1
Nvidia Shield_experience
Nvidia Shield Tv — versions SHIELD Experience prior to v8.0

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

psirt@nvidia.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-5679?: CVE-2019-5679 is a high-severity vulnerability in Google Android, classified under Improper Authentication. CVSS score: 7.8/10. Published 2019-08-06.
How severe is CVE-2019-5679?: High severity. CVSS v3 base score is 7.8 out of 10.