PT-2019-17811
CVE-2019-5680
·
Published
2019-07-19
·
Updated
2019-07-24
Description by
CVSS 3.1
6.7
MediumMetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
NVIDIA Jetson TX1 L4T versions prior to R32.2
Description
The issue is related to the Tegra bootloader in the nvtboot component, where the nvtboot-cpu image is loaded without validating the load address first. This could potentially lead to code execution, denial of service, or escalation of privileges.
Recommendations
For versions prior to R32.2, update to version R32.2 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾