Nvidia Jetson AGX Xavier Series, Jetson Xavier NX vulnerabilities

6 vulnerabilities

Known vulnerabilities in Nvidia Jetson AGX Xavier Series, Jetson Xavier NX, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.1CVE-2021-1110nvidiajetson agx xavier series, jetson xavier nx+1
EPSS score
0.23%
NVIDIA Linux kernel distributions on Jetson Xavier contain a vulnerability in camera firmware where a user can change input data after validation, which may lead to complete denial of service and serious data corruption of all kernel components.5.6CVE-2022-28193nvidiajetson agx xavier series, jetson xavier nx+1
EPSS score
0.27%
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where insufficient validation of untrusted data may allow a local attacker with elevated privileges to cause a memory buffer overflow, which may lead to code execution, loss of integrity, limited denial of service, and some impact to confidentiality.5.7CVE-2022-28195nvidiajetson agx xavier series, jetson xavier nx+1
EPSS score
0.25%
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_read_file function, where insufficient validation of untrusted data may allow a highly privileged local attacker to cause a integer overflow, which may lead to code execution, escalation of privileges, limited denial of service, and some impact to confidentiality and integrity. The scope of impact can extend to other components.7.3CVE-2022-28194nvidiajetson agx xavier series, jetson xavier nx+1
EPSS score
0.32%
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where, if TFTP is enabled, a local attacker with elevated privileges can cause a memory buffer overflow, which may lead to code execution, loss of Integrity, limited denial of service, and some impact to confidentiality.5CVE-2022-28197nvidiajetson agx xavier series, jetson xavier nx+1
EPSS score
0.21%
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_mount function, where Insufficient validation of untrusted data may allow a highly privileged local attacker to cause an integer overflow. This difficult-to-exploit vulnerability may lead to code execution, escalation of privileges, limited denial of service, and some impact to confidentiality and integrity. The scope of impact can extend to other components.7.1CVE-2023-25518nvidiajetson agx xavier series, jetson xavier nx+1
EPSS score
0.27%
NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arbitrary memory. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and loss of integrity.