PT-2025-6415 · Nvidia · Nvidia Jetson Orin Nx+3

Austin Herring + 1 · Published 2025-02-11 · Updated 2025-02-13 · CVE-2024-0112

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Jetson AGX Orin and NVIDIA IGX Orin software (affected versions not specified) NVIDIA Jetson AGX Orin, Orin NX, Orin Nano, and IGX Orin platforms (affected versions not specified)

Description The issue is related to improper input validation, which can be exploited by an attacker to escalate certain permissions to a limited degree. A successful exploit might lead to code execution, denial of service, data corruption, information disclosure, or escalation of privilege.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2024-0112

Affected Products

Nvidia Igx Orin

Nvidia Jetson Agx Orin

Nvidia Jetson Orin Nx

Nvidia Jetson Orin Nano

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-0112 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5611 · Note
• https://twitter.com/TweetThreatNews/status/1890029271202111961 · Twitter Post
• https://twitter.com/fridaysecurity/status/1889859117566853134 · Twitter Post
• https://t.me/cvenotify/110967 · Telegram Post
• https://t.me/pentestingnews/56495 · Telegram Post
• https://twitter.com/the_yellow_fall/status/1889858295017640137 · Twitter Post
• https://t.me/cvedetector/17801 · Telegram Post
• https://twitter.com/CVEnew/status/1889498766639768022 · Twitter Post