NVIDIA Jetson TX2 vulnerabilities

11 CVEs affecting NVIDIA Jetson TX2, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-34400, published 2021-11-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-3639, published 2018-05-22. Medium severity, CVSS 5.5. EPSS: 60.6% chance of exploitation in the next 30 days. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of…
CVE-2019-5672, published 2019-04-11. Critical severity, CVSS 9.1. EPSS: 1.4% chance of exploitation in the next 30 days. NVIDIA Jetson TX1 and TX2 contain a vulnerability in the Linux for Tegra (L4T) operating system (on all versions prior to R28.3) where the Secure Shell (SSH) keys provided in the sample rootfs are…
CVE-2018-6239, published 2019-04-12. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. NVIDIA Jetson TX2 contains a vulnerability by means of speculative execution where local and unprivileged code may access the contents of cached information in an unauthorized manner, which may lead…
CVE-2018-6269, published 2019-04-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA Jetson TX2 contains a vulnerability in the kernel driver where input/output control (IOCTL) handling for user mode requests could create a non-trusted pointer dereference, which may lead to…
CVE-2019-5673, published 2019-04-11. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA Jetson TX2 contains a vulnerability in the kernel driver (on all versions prior to R28.3) where the ARM System Memory Management Unit (SMMU) improperly checks for a fault condition, causing…
CVE-2021-34400, published 2021-11-20. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to information from unscrubbed memory, which may…
CVE-2021-34399, published 2021-11-20. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to information from unscrubbed registers, which…
CVE-2021-1105, published 2021-11-20. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to access debug registers during runtime, which may lead to…
CVE-2021-1088, published 2021-11-20. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to utilize debug mechanisms with insufficient access control,…
CVE-2021-23219, published 2021-11-20. Medium severity, CVSS 4.1. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to access protected information by identifying, exploiting, and…

Latest

CVE-2021-1125, published 2021-11-20. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to corrupt program data.