Approved changes feed: RSS · Atom

cpe:2.3:a:nvidia:jetson_agx_xavier_series,_jetson_xavier_nx:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNvidia (40c2793d-f37d-5eb8-a9a9-0c9926e4695b)
ProductJetson Agx Xavier Series, Jetson Xavier Nx (0963c249-1bf5-5bf3-a642-d9ca214f0b4f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-25518 vulnerable 2026-06-08 05:56:09.133747 Details available
HIGH (7.1)
NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arbitrary memory. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and loss of integrity.
Published: 2023-06-23T17:09:10.859Z
Updated: 2024-11-29T14:31:08.192Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28197 vulnerable 2026-06-08 05:42:44.202930 Details available
MEDIUM (5)
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_mount function, where Insufficient validation of untrusted data may allow a highly privileged local attacker to cause an integer overflow. This difficult-to-exploit vulnerability may lead to code execution, escalation of privileges, limited denial of service, and some impact to confidentiality and integrity. The scope of impact can extend to other components.
Published: 2022-04-27T17:57:53.000Z
Updated: 2024-08-03T05:48:37.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28195 vulnerable 2026-06-08 05:42:44.197820 Details available
MEDIUM (5.7)
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_read_file function, where insufficient validation of untrusted data may allow a highly privileged local attacker to cause a integer overflow, which may lead to code execution, escalation of privileges, limited denial of service, and some impact to confidentiality and integrity. The scope of impact can extend to other components.
Published: 2022-04-27T17:57:35.000Z
Updated: 2024-08-03T05:48:37.504Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28194 vulnerable 2026-06-08 05:42:44.197145 Details available
HIGH (7.3)
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where, if TFTP is enabled, a local attacker with elevated privileges can cause a memory buffer overflow, which may lead to code execution, loss of Integrity, limited denial of service, and some impact to confidentiality.
Published: 2022-04-27T17:57:27.000Z
Updated: 2024-08-03T05:48:37.482Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28193 vulnerable 2026-06-08 05:42:44.194419 Details available
MEDIUM (5.6)
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where insufficient validation of untrusted data may allow a local attacker with elevated privileges to cause a memory buffer overflow, which may lead to code execution, loss of integrity, limited denial of service, and some impact to confidentiality.
Published: 2022-04-27T17:57:17.000Z
Updated: 2024-08-03T05:48:37.466Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.