Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-24148: NVIDIA JetPack: Data Exposure and Tampering Risk

CVE-2026-24148 · published 7 months ago

Summary

NVIDIA's JetPack software has a flaw that could allow an attacker to access sensitive data and tamper with it, potentially leading to data breaches and system crashes. This issue affects devices sharing the same machine ID. To protect your devices, update to the latest version of JetPack as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
nvidia	jetson_linux	< 35.6.4 >= 36.0, < 36.5 `cpe:2.3:o:nvidia:jetson_linux::::::::`

Original advisory text

NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data tampering, and partial denial of service across devices sharing the same machine ID.

References

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

9.4 Critical

Exploitation

<1% chance of attack within 30 days

Type

CWE-1188Initialization of a Resource with an Insecure Default

Timeline

Published31 Mar 2026

Updated4 Nov 2026

First seen31 Mar 2026

Sources

CVE-2026-24148 · NVD

Track software like this

Free during beta