CVE-2024-0112 HIGH

CVE-2024-0112

Vendor Nvidia
Product Jetson AGX Orin series (including Jetson Orin NX series, Jetson Orin Nano series)
Weakness CWE-20 · Input validation
Published February 11, 2025
Last update February 12, 2025

CVSS base score

7.5/10
Attack vector Local
Attack complexity High
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

NVIDIA Jetson AGX Orin™ and NVIDIA IGX Orin software contain a vulnerability where an attacker can cause an improper input validation issue by escalating certain permissions to a limited degree. A successful exploit of this vulnerability might lead to code execution, denial of service, data corruption, information disclosure, or escalation of privilege.

Key dates

02Disclosure timeline

February 11, 2025 CVE published
February 12, 2025 Record updated