NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function, where insufficient validation of untrusted data may allow a local attacker with elevated privileges to cause a memory buffer overflow, which may lead to code execution, limited loss of Integrity, and limited denial of service. The scope of impact can extend to other components.
References
Link | Resource |
---|---|
https://nvidia.custhelp.com/app/answers/detail/a_id/5343 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: nvidia
Published: 2022-04-27T17:57:44
Updated: 2022-05-30T18:00:18
Reserved: 2022-03-30T00:00:00
Link: CVE-2022-28196
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-04-27T18:15:08.097
Modified: 2023-06-28T13:59:39.710
Link: CVE-2022-28196
JSON object: View
Redhat Information
No data.