CVE-2025-23270: NVIDIA Jetson Orin, Igx Orin And Xavier Devices

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

NVIDIA Jetson Linux contains a vulnerability in UEFI Management mode, where an unprivileged local attacker may cause exposure of sensitive information via a side channel vulnerability. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.

Affected products

• NVIDIA Jetson Orin, Igx Orin And Xavier Devices

Published 2025-07-17. Last modified 2026-06-17.