Vulnerabilities > Nvidia

DATE CVE VULNERABILITY TITLE RISK
2022-04-29 CVE-2022-28198 Unspecified vulnerability in Nvidia Omniverse Cache and Omniverse Nucleus
NVIDIA Omniverse Nucleus and Cache contain a vulnerability in its configuration of OpenSSL, where an attacker with physical access to the system can cause arbitrary code execution which can impact confidentiality, integrity, and availability.
local
low complexity
nvidia
4.6
2022-04-27 CVE-2022-28193 Improper Input Validation vulnerability in Nvidia Jetson Linux
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where insufficient validation of untrusted data may allow a local attacker to cause a memory buffer overflow, which may lead to code execution, loss of integrity, limited denial of service, and some impact to confidentiality.
local
low complexity
nvidia CWE-20
4.6
2022-04-27 CVE-2022-28194 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Nvidia Jetson Linux
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where, if TFTP is enabled, a local attacker can cause a memory buffer overflow, which may lead to code execution, loss of Integrity, limited denial of service, and some impact to confidentiality.
local
nvidia CWE-119
4.4
2022-04-27 CVE-2022-28195 Integer Overflow or Wraparound vulnerability in Nvidia Jetson Linux
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_read_file function, where insufficient validation of untrusted data may allow a highly privileged local attacker to cause a integer overflow, which may lead to code execution, escalation of privileges, limited denial of service, and some impact to confidentiality and integrity.
local
low complexity
nvidia CWE-190
4.6
2022-04-27 CVE-2022-28196 Improper Input Validation vulnerability in Nvidia Jetson Linux
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function, where insufficient validation of untrusted data may allow a local attacker to cause a memory buffer overflow, which may lead to code execution, limited loss of Integrity, and limited denial of service.
local
low complexity
nvidia CWE-20
3.6
2022-04-27 CVE-2022-28197 Integer Overflow or Wraparound vulnerability in Nvidia Jetson Linux
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_mount function, where Insufficient validation of untrusted data may allow a highly privileged local attacker to cause an integer overflow.
local
low complexity
nvidia CWE-190
4.6
2022-03-29 CVE-2022-21821 Integer Overflow or Wraparound vulnerability in Nvidia Cuda Toolkit
NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file.
network
nvidia CWE-190
6.8
2022-03-24 CVE-2022-21820 Improper Input Validation vulnerability in Nvidia Data Center GPU Manager
NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited code execution, some denial of service, escalation of privileges, and limited impacts to both data confidentiality and integrity.
network
low complexity
nvidia CWE-20
6.5
2022-03-11 CVE-2022-21819 Incorrect Permission Assignment for Critical Resource vulnerability in Nvidia Jetson Linux
NVIDIA distributions of Jetson Linux contain a vulnerability where an error in the IOMMU configuration may allow an unprivileged attacker with physical access to the board direct read/write access to the entire system address space through the PCI bus.
local
low complexity
nvidia CWE-732
4.6
2022-02-15 CVE-2022-21818 Cleartext Storage of Sensitive Information vulnerability in Nvidia License System
NVIDIA License System contains a vulnerability in the installation scripts for the DLS virtual appliance, where a user on a network after signing in to the portal can access other users’ credentials, allowing them to gain escalated privileges, resulting in limited impact to both confidentiality and integrity.
network
low complexity
nvidia CWE-312
5.5