What is CVE-2019-5689?

CVE-2019-5689 is a high-severity vulnerability in NVIDIA Geforce Experience. CVSS score: 7.8/10. Published 2019-11-09.

How severe is CVE-2019-5689?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in NVIDIA Geforce Experience

CVE-2019-5689

NVIDIA GeForce Experience, all versions prior to 3.20.1, contains a vulnerability in the Downloader component in which a user with local system access can craft input that may allow malicious files to be downloaded and saved. This behavior may lead to code execution, denial of service, or information disclosure.

EPSS: 0.003 (27.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Nvidia Geforce_experience
Nvidia Geforce Experience — versions All versions prior to 3.20.1

References

psirt@nvidia.com (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2019-5689?: CVE-2019-5689 is a high-severity vulnerability in NVIDIA Geforce Experience. CVSS score: 7.8/10. Published 2019-11-09.
How severe is CVE-2019-5689?: High severity. CVSS v3 base score is 7.8 out of 10.