CVE-2019-5678

CWE-20 — Improper Input Validation3 documents3 sources
Severity
7.8HIGH
EPSS
0.4%
top 41.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Nvidia Geforce ExperienceNvidia Nvidia Geforce Experience
Timeline
PublishedMay 31
Latest updateMay 24

Description

NVIDIA GeForce Experience versions prior to 3.19 contains a vulnerability in the Web Helper component, in which an attacker with local system access can craft input that may not be properly validated. Such an attack may lead to code execution, denial of service or information disclosure.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

Patches

Patch: nvidia.custhelp.com ↗Patch: nvidia.custhelp.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-m3v4-f84c-r47g: NVIDIA GeForce Experience versions prior to 3↗2022-05-24
▶
CVEList
CVE-2019-5678: NVIDIA GeForce Experience versions prior to 3↗2019-05-31
▶
CVE-2019-5678 (HIGH CVSS 7.8) | NVIDIA GeForce Experience versions | cvebase.io