CVE-2017-6278: NVIDIA Jetson TK1 Firmware

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

NVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or write a buffer using an index or pointer that references a memory location after the end of the buffer, which may lead to a denial of service or possible escalation of privileges.

Affected products

  • NVIDIA Jetson TK1 Firmware: up to and including 21.6
  • NVIDIA Jetson TX1 Firmware: up to and including 24.2.2; up to and including 28.1
  • NVIDIA Tegra k1 Firmware: up to and including 21.6

Published 2018-03-26. Last modified 2026-06-17.