Skip to content
OpenAdvisories
High · 7.1 CVE-2023-25518 EUVD-2023-29470GHSA-2rv4-2r9c-4q9r

NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with p…

Published Jun 23, 2023 · Updated Nov 29, 2024 · Assigned by nvidia

Description

NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arbitrary memory. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and loss of integrity.

Affected products

VendorProductAffectedFixed
NVIDIA Jetson AGX Xavier series, Jetson Xavier NX All versions prior to 32.7.4 —

References