Medium severity6.7NVD Advisory· Published Jul 19, 2019· Updated Jun 17, 2026

CVE-2019-5680

Description

In NVIDIA Jetson TX1 L4T R32 version branch prior to R32.2, Tegra bootloader contains a vulnerability in nvtboot in which the nvtboot-cpu image is loaded without the load address first being validated, which may lead to code execution, denial of service, or escalation of privileges.

Affected products

Nvidia/Jetson Tx1 Firmware
cpe:2.3:o:nvidia:jetson_tx1_firmware:*:*:*:*:*:*:*:*
Range: <r32.2
Nvidia/Jetson TX1 L4Tllm-create
Range: <R32.2
Nvidia/Jetson Tx1cpe-rescue
Range: R32 versions prior to 32.2

Patches

Vulnerability mechanics

References

nvidia.custhelp.com/app/answers/detail/a_id/4835nvdVendor Advisory
www.securityfocus.com/bid/109341nvd
nvidia.custhelp.com/app/answers/detail/a_id/4804nvd

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000