CVE-2024-0112
HIGHNVIDIA Jetson AGX Orin & IGX Orin - Privilege Escalation
Title source: llmDescription
NVIDIA Jetson AGX Orin™ and NVIDIA IGX Orin software contain a vulnerability where an attacker can cause an improper input validation issue by escalating certain permissions to a limited degree. A successful exploit of this vulnerability might lead to code execution, denial of service, data corruption, information disclosure, or escalation of privilege.
References (1)
Core 1
Core References
Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5611
Scores
CVSS v3
7.5
EPSS
0.0005
EPSS Percentile
15.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-20
Status
published
Products (3)
NVIDIA/IGX Orin
All versions prior to IGX 1.1
NVIDIA/Jetson AGX Orin series (including Jetson Orin NX series, Jetson Orin Nano series)
All versions prior to 35.6
NVIDIA/Jetson AGX Orin series (including Jetson Orin NX series, Jetson Orin Nano series)
All versions prior to 36.4
Published
Feb 12, 2025
Tracked Since
Feb 18, 2026