CVE-2024-0112
High
Description
NVIDIA Jetson AGX Orin™ and NVIDIA IGX Orin software contain a vulnerability where an attacker can cause an improper input validation issue by escalating certain permissions to a limited degree. A successful exploit of this vulnerability might lead to code execution, denial of service, data corruption, information disclosure, or escalation of privilege.
SeverityHigh
CVSS7.5
Exploit probability—
ProductJetson AGX Orin series (including Jetson Orin NX series, Jetson Orin Nano series)
PublishedFeb 12, 2025
First seenFeb 12, 2025
Weakness typeCWE-20Improper input validation
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| NVIDIA Jetson AGX Orin series (including Jetson Orin NX series, Jetson Orin Nano series) | All versions prior to 36.4, All versions prior to 35.6 | — |
| NVIDIA IGX Orin | All versions prior to IGX 1.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.