1. Home
  2. CVE Database
  3. CVE-2022-28196
MEDIUM · 4.6

CVE-2022-28196

NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function, where insufficient validation of untrusted data may allow a local attacker with elevated privileges t...

Vulnerability Description

NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function, where insufficient validation of untrusted data may allow a local attacker with elevated privileges to cause a memory buffer overflow, which may lead to code execution, limited loss of Integrity, and limited denial of service. The scope of impact can extend to other components.

CVSS Score

4.6

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
NONE
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
NvidiaJetson Linux< 32.7.2
NvidiaJetson Agx Xavier-
NvidiaJetson Tx2-
NvidiaJetson Tx2 Nx-
NvidiaJetson Xavier Nx-

Related Weaknesses (CWE)

CWE-20CWE-787

References

FAQ

What is CVE-2022-28196?

CVE-2022-28196 is a vulnerability with a CVSS score of 4.6 (MEDIUM). NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function, where insufficient validation of untrusted data may allow a local attacker with elevated privileges t...

How severe is CVE-2022-28196?

CVE-2022-28196 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-28196?

Check the references section above for vendor advisories and patch information. Affected products include: Nvidia Jetson Linux, Nvidia Jetson Agx Xavier, Nvidia Jetson Tx2, Nvidia Jetson Tx2 Nx, Nvidia Jetson Xavier Nx.