CVE-2022-42269: nvidia jetson agx xavier series, jetson xavier nx, jetson tx1, jetson tx2 series, jetson tx2 nx Improper Input Validation

Vulnerability summary

CVE-2022-42269 is a high (CVSS 7.9) Improper Input Validation vulnerability in nvidia jetson agx xavier series, jetson xavier nx, jetson tx1, jetson tx2 series, jetson tx2 nx. EPSS estimates a 0.19% chance of exploitation in the next 30 days, higher than 7.7% of scored vulnerabilities.

Timeline

1. 30-12-2022
   PublishedVulnerability first disclosed.
2. 10-04-2025
   Last modifiedVulnerability information updated.

Description

NVIDIA Trusted OS contains a vulnerability in an SMC call handler, where failure to validate untrusted input may allow a highly privileged local attacker to cause information disclosure and compromise integrity. The scope of the impact can extend to other components.

• CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.