CVE-2024-0148

State: Published
Severity: 7.6 High
Published: Feb 25, 2025
Updated: Feb 25, 2025
Reserved: Dec 2, 2023

Description

NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrusted code. A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. The scope of the impacts can extend to other components.

Scores

CVSS	Score	Vector	Source
3.1	7.6 High	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	nvidia

Weaknesses

CWE-447

Affected Products

Product	Versions
IGX OrinNVIDIA	All versions prior to IGX 1.1Affected
Jetson AGX Orin SeriesNVIDIA	All versions prior to 36.4.3Affected

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5617

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.