CVE-2026-24148

HIGH

8.3

Description

NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data tampering, and partial denial of service across devices sharing the same machine ID.

Details CVE

Score CVSS v3.18.3

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisLOW

Interaction utilisateurNONE

Publie3/31/2026

Derniere modification4/3/2026

Sourcenvd

Observations honeypot0

Produits affectes

nvidia:jetson_agx_orin_32gbnvidia:jetson_agx_orin_64gbnvidia:jetson_agx_orin_developer_kitnvidia:jetson_agx_orin_industrialnvidia:jetson_agx_xavier_32gbnvidia:jetson_agx_xavier_64gbnvidia:jetson_agx_xavier_industrialnvidia:jetson_linuxnvidia:jetson_orin_nano_4gbnvidia:jetson_orin_nano_8gbnvidia:jetson_orin_nano_super_developer_kitnvidia:jetson_orin_nx_16gbnvidia:jetson_orin_nx_8gbnvidia:jetson_xavier_nx_16gbnvidia:jetson_xavier_nx_8gb

Faiblesses (CWE)

CWE-1188

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24148(psirt@nvidia.com)

https://nvidia.custhelp.com/app/answers/detail/a_id/5797(psirt@nvidia.com)

https://www.cve.org/CVERecord?id=CVE-2026-24148(psirt@nvidia.com)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.