NVIDIA Tegra Mobile Processor BootROM Recovery Mode Buffer Overflow Vulnerability

NVIDIA Tegra mobile processors are central processor products from NVIDIA Corporation.BootROM Recovery Mode RCM is one of the Engineering Mode components that enables data modification. A buffer overflow vulnerability exists in RCM in versions of the NVIDIA Tegra mobile processor prior to 2016. A...

Buffer overflow

Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery Mode RCM. An attacker with physical access to the device's USB and the ability to force the device to reboot into RCM could exploit the vulnerability to execute unverified code...

CVE-2018-6242

Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery Mode RCM. An attacker with physical access to the device's USB and the ability to force the device to reboot into RCM could exploit the vulnerability to execute unverified code...

CVE-2018-6242

CVE-2018-6242 affects NVIDIA Tegra mobile processors released before 2016, via a buffer overflow in BootROM Recovery Mode (RCM). The underlying issue lets an attacker with physical access and a USB connection force reboot into RCM to execute unverified code. Public materials confirm exploit guida...

Security Notice: NVIDIA Tegra RCM Vulnerability

NVIDIA'S response to the Tegra RCM issue April 24, 2018 This notice is a response to recent publications on a security issue regarding NVIDIA Tegra Recovery Mode RCM. A researcher indicates that a person with physical access to older Tegra-based processors could connect to the device's USB port,...

grub2: modules built in on EFI builds that allow loading arbitrary code, circumventing secure boot

It was discovered that grub2 builds for EFI systems contained modules that were not suitable to be loaded in a Secure Boot environment. An attacker could use this flaw to circumvent the Secure Boot mechanisms and load non-verified code. Attacks could use the boot menu if no password was set, or t...

java.jvm.byte.code.ver.txt

Date: Mon, 5 Apr 1999 08:56:10 -0400 From: Gary McGraw To: [email protected] Subject: Security Hole in Java 2 and JDK 1.1.x Hi all, Karsten Sohr at the University of Marburg in Germany email [email protected] has discovered a very serious security flaw in several current versions ...