← Database

CVE-2022-28194

HIGH CVSS: 7.3 Published: 2022-04-27 Modified: 2026-06-17

Description

NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where, if TFTP is enabled, a local attacker with elevated privileges can cause a memory buffer overflow, which may lead to code execution, loss of Integrity, limited denial of service, and some impact to confidentiality.

Affected Platforms

Nvidia Jetson LinuxNvidia Jetson Agx XavierNvidia Jetson Xavier Nx

Weakness Type

CWE-119, CWE-119

References