NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function, where insufficient validation of untrusted data may allow a local attacker with elevated privileges to cause a memory buffer overflow, which may lead to code execution, limited loss of Integrity, and limited denial of service. The scope of impact can extend to other components.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://nvidia.custhelp.com/app/answers/detail/a_id/5343 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: nvidia
Published: 2022-04-27T17:57:44
Updated: 2024-08-03T05:48:37.325Z
Reserved: 2022-03-30T00:00:00
Link: CVE-2022-28196
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2022-04-27T18:15:08.097
Modified: 2023-06-28T13:59:39.710
Link: CVE-2022-28196
Redhat
No data.