PT-2019-17811 · Nvidia · Nvidia Jetson Tx1 L4T

Published 2019-07-19 · Updated 2019-07-24 · CVE-2019-5680

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Jetson TX1 L4T versions prior to R32.2

Description The issue is related to the Tegra bootloader in the nvtboot component, where the nvtboot-cpu image is loaded without validating the load address first. This could potentially lead to code execution, denial of service, or escalation of privileges.

Recommendations For versions prior to R32.2, update to version R32.2 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2019-5680

Affected Products

Nvidia Jetson Tx1 L4T

References · 5

• https://osv.dev/vulnerability/CVE-2019-5680 · Vendor Advisory
• https://nvidia.custhelp.com/app/answers/detail/a_id/4835 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5680 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/4804 · Note
• http://securityfocus.com/bid/109341 · Note