Skip to content
OpenAdvisories
Unscored Public exploit CVE-2018-6242 EUVD-2018-18003GHSA-wx59-vwv8-8whg

Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery Mode (RCM). An attac…

Published May 1, 2018 · Updated Sep 16, 2024 · Assigned by nvidia

Vendor: NVIDIA Product: Some NVIDIA Tegra Mobile Processors

Description

Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery Mode (RCM). An attacker with physical access to the device's USB and the ability to force the device to reboot into RCM could exploit the vulnerability to execute unverified code.

Affected products

VendorProductAffectedFixed
Nvidia Some NVIDIA Tegra Mobile Processors — —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 7 repositories

  • DavidBuchanan314/NXLoader ★ 561 · Apr 28, 2018

    My first Android app: Launch Fusée Gelée payloads from stock Android (CVE-2018-6242)

  • reswitched/rcm-modchips ★ 21 · May 22, 2018

    Collection of "modchip" designs for launching payloads via the Tegra RCM bug (CVE-2018-6242)

  • austinhartzheim/fusee-gelee ★ 5 · Sep 7, 2020

    Rust implementation of the Fusée Gelée exploit (CVE-2018-6242) for Tegra processors.

  • nikameru/nxboot ★ 2 · Nov 1, 2025

    Payload injection tool for Nintendo Switch consoles vulnerable to CVE-2018-6242 ("Fusée Gelée")

  • Resi-le/NXLoader ★ 1 · Dec 21, 2025

    An app that enables payload injection into a Switch console from an Android device by exploiting the CVE-2018-6242 vulnerability

  • oliviaholly/fusee-gelee ★ 0 · Mar 4, 2026

    An implementation of the Fusee Gelee exploit (CVE-2018-6242) for the Nintendo Switch, along with a custom payload.

  • Swiftloke/fusee-toy ★ 0 · May 25, 2022

    Implementation of CVE-2018-6242 (AKA Fusée Gelée, AKA shofel2)

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References