Jetson Xavier Nx (Nvidia) - vulnerabilities (CVEs)

28 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2024-08-08. Vendor: Nvidia.

CVEs of Jetson Xavier Nx

CVE-2024-0108 - CVSS 8.8 (high), 2024-08-08: NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A…
CVE-2023-25520 - CVSS 5.5 (medium), 2023-06-23: NVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged local attacker can configure invalid settings, resulting in…
CVE-2023-25518 - CVSS 7.1 (high), 2023-06-23: NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to…
CVE-2022-42270 - CVSS 7.8 (high), 2022-12-30: NVIDIA distributions of Linux contain a vulnerability in nvdla_emu_task_submit, where unvalidated input may allow a local attacker to cause stack-based buffer…
CVE-2022-42269 - CVSS 7.9 (high), 2022-12-30: NVIDIA Trusted OS contains a vulnerability in an SMC call handler, where failure to validate untrusted input may allow a highly privileged local attacker to…
CVE-2022-28197 - CVSS 5 (medium), 2022-04-27: NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_mount function, where Insufficient validation of untrusted data may allow a…
CVE-2022-28196 - CVSS 4.6 (medium), 2022-04-27: NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function, where insufficient validation of untrusted data may allow a…
CVE-2022-28195 - CVSS 5.7 (medium), 2022-04-27: NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_read_file function, where insufficient validation of untrusted data may allow a…
CVE-2022-28194 - CVSS 7.3 (high), 2022-04-27: NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where, if TFTP is enabled, a local attacker with elevated…
CVE-2022-28193 - CVSS 5.6 (medium), 2022-04-27: NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where insufficient validation of untrusted data may allow a…
CVE-2021-34400 - CVSS 4.4 (medium), 2021-11-20: NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to…
CVE-2021-1105 - CVSS 4.4 (medium), 2021-11-20: NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to access debug…
CVE-2021-34399 - CVSS 4.4 (medium), 2021-11-20: NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to…
CVE-2021-1088 - CVSS 4.4 (medium), 2021-11-20: NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to utilize debug…
CVE-2021-23219 - CVSS 4.1 (medium), 2021-11-20: NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to access protected…
CVE-2021-1125 - CVSS 4.4 (medium), 2021-11-20: NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to corrupt program data.
CVE-2021-1109 - CVSS 7.2 (high), 2021-08-11: NVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized modification by camera resources may result in loss of data…
CVE-2021-1113 - CVSS 4.7 (medium), 2021-08-11: NVIDIA camera firmware contains a difficult to exploit vulnerability where a highly privileged attacker can cause unauthorized modification to camera…
CVE-2021-1108 - CVSS 7.3 (high), 2021-08-11: NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack of input validation may lead to…
CVE-2021-1112 - CVSS 5.5 (medium), 2021-08-11: NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where a null pointer dereference may lead to complete denial of service.
CVE-2021-1107 - CVSS 7.8 (high), 2021-08-11: NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVMAP_IOC_WRITE* paths, where improper access controls may lead to code execution, complete…
CVE-2021-1111 - CVSS 6.7 (medium), 2021-08-11: Bootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an incorrect bounds check, which may lead…
CVE-2021-1114 - CVSS 4.4 (medium), 2021-08-11: NVIDIA Linux kernel distributions contain a vulnerability in the kernel crypto node, where use after free may lead to complete denial of service.
CVE-2021-1106 - CVSS 7.8 (high), 2021-08-11: NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in escalation of…
CVE-2021-34375 - CVSS 7.7 (high), 2021-06-30: Trusty contains a vulnerability in all trusted applications (TAs) where the stack cookie was not randomized, which might result in stack-based buffer…
CVE-2021-34378 - CVSS 7.7 (high), 2021-06-30: Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 11 is missing. Improper restriction of operations within the bounds of…
CVE-2021-34384 - CVSS 7.8 (high), 2021-06-30: Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow could cause memory corruption, which might lead to denial of service or code…
CVE-2021-34374 - CVSS 7.7 (high), 2021-06-30: Trusty contains a vulnerability in command handlers where the length of input buffers is not verified. This vulnerability can cause memory corruption, which…
CVE-2021-34377 - CVSS 7.7 (high), 2021-06-30: Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 9 is missing. Improper restriction of operations within the bounds of…
CVE-2021-34383 - CVSS 6.7 (medium), 2021-06-30: Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow might lead to denial of service or escalation of privileges.
CVE-2021-34376 - CVSS 7.7 (high), 2021-06-30: Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 5 is missing. Improper restriction of operations within the bounds of…
CVE-2021-34379 - CVSS 7.7 (high), 2021-06-30: Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 10 is missing. The length of an I/O buffer parameter is not checked,…
CVE-2021-1070 - CVSS 7.1 (high), 2021-01-26: NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the apply_binaries.sh…
CVE-2021-1071 - CVSS 5.6 (medium), 2021-01-26: NVIDIA Tegra kernel in Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, all L4T versions prior to r32.5, contains a vulnerability in…