NVIDIA Igx Orin vulnerabilities

3 CVEs affecting NVIDIA Igx Orin, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-33177, published 2025-10-14.

More from NVIDIA.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-0148, published 2025-02-25. High severity, CVSS 7.6. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrusted code. A…
• CVE-2024-0112, published 2025-02-12. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA Jetson AGX Orin™ and NVIDIA IGX Orin software contain a vulnerability where an attacker can cause an improper input validation issue by escalating certain permissions to a limited degree. A…
• CVE-2025-33177, published 2025-10-14. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. NVIDIA Jetson Linux and IGX OS contain a vulnerability in NvMap, where improper tracking of memory allocations could allow a local attacker to cause memory overallocation. A successful exploitation…