Vulnerabilities > Nvidia > Jetson Linux

DATE CVE VULNERABILITY TITLE RISK
2023-06-23 CVE-2023-25518 Unspecified vulnerability in Nvidia Jetson Linux
NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arbitrary memory.
low complexity
nvidia
6.8
2023-06-23 CVE-2023-25520 Improper Input Validation vulnerability in Nvidia Jetson Linux
NVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged local attacker can configure invalid settings, resulting in denial of service.
local
low complexity
nvidia CWE-20
5.5
2022-12-30 CVE-2022-42269 Improper Input Validation vulnerability in Nvidia Jetson Linux
NVIDIA Trusted OS contains a vulnerability in an SMC call handler, where failure to validate untrusted input may allow a highly privileged local attacker to cause information disclosure and compromise integrity.
local
low complexity
nvidia CWE-20
7.9
2022-12-30 CVE-2022-42270 Out-of-bounds Write vulnerability in Nvidia Jetson Linux
NVIDIA distributions of Linux contain a vulnerability in nvdla_emu_task_submit, where unvalidated input may allow a local attacker to cause stack-based buffer overflow in kernel code, which may lead to escalation of privileges, compromised integrity and confidentiality, and denial of service.
local
low complexity
nvidia CWE-787
7.8
2022-04-27 CVE-2022-28193 Out-of-bounds Write vulnerability in Nvidia Jetson Linux
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where insufficient validation of untrusted data may allow a local attacker with elevated privileges to cause a memory buffer overflow, which may lead to code execution, loss of integrity, limited denial of service, and some impact to confidentiality.
local
low complexity
nvidia CWE-787
5.6
2022-04-27 CVE-2022-28194 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Nvidia Jetson Linux
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where, if TFTP is enabled, a local attacker with elevated privileges can cause a memory buffer overflow, which may lead to code execution, loss of Integrity, limited denial of service, and some impact to confidentiality.
local
low complexity
nvidia CWE-119
5.6
2022-04-27 CVE-2022-28195 Integer Overflow or Wraparound vulnerability in Nvidia Jetson Linux
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_read_file function, where insufficient validation of untrusted data may allow a highly privileged local attacker to cause a integer overflow, which may lead to code execution, escalation of privileges, limited denial of service, and some impact to confidentiality and integrity.
local
low complexity
nvidia CWE-190
5.7
2022-04-27 CVE-2022-28196 Out-of-bounds Write vulnerability in Nvidia Jetson Linux
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function, where insufficient validation of untrusted data may allow a local attacker with elevated privileges to cause a memory buffer overflow, which may lead to code execution, limited loss of Integrity, and limited denial of service.
local
low complexity
nvidia CWE-787
4.6
2022-04-27 CVE-2022-28197 Integer Overflow or Wraparound vulnerability in Nvidia Jetson Linux
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_mount function, where Insufficient validation of untrusted data may allow a highly privileged local attacker to cause an integer overflow.
local
high complexity
nvidia CWE-190
5.0
2022-03-11 CVE-2022-21819 Incorrect Permission Assignment for Critical Resource vulnerability in Nvidia Jetson Linux
NVIDIA distributions of Jetson Linux contain a vulnerability where an error in the IOMMU configuration may allow an unprivileged attacker with physical access to the board direct read/write access to the entire system address space through the PCI bus.
local
low complexity
nvidia CWE-732
4.6