Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.6

NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where, if TFTP is enabled, a local attacker with elevated privileges can cause a memory buffer overflo...

CVE-2022-28194 · published 4 years ago
Summary

NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where, if TFTP is enabled, a local attacker with elevated privileges can cause a memory buffer overflow, which may lead to code execution, loss of Integrity, limited denial of service, and some impact to c...

What to do
  • Update nvidia jetson_linux to version 32.7.2 or later.
Affected software
VendorProductAffected versions
nvidia jetson_linux < 32.7.2
cpe:2.3:o:nvidia:jetson_linux:*:*:*:*:*:*:*:*
Original advisory text
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where, if TFTP is enabled, a local attacker with elevated privileges can cause a memory buffer overflo...
NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where, if TFTP is enabled, a local attacker with elevated privileges can cause a memory buffer overflow, which may lead to code execution, loss of Integrity, limited denial of service, and some impact to confidentiality.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.6 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published27 Apr 2022
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2022-28194 · NVD
Track software like this
Free during beta