CVE-2026-24148
CVSS Score
8.3
EPSS Score
0.0%
EPSS Percentile
11th
NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data tampering, and partial denial of service across devices sharing the same machine ID.
| CWE | CWE-1188 |
| Vendor | nvidia |
| Product | jetson xavier series and jetson orin series |
| Published | Mar 31, 2026 |
| Last Updated | Apr 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for nvidia jetson xavier series and jetson orin series
Be the first to know when new high vulnerabilities affecting nvidia jetson xavier series and jetson orin series are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
Low
Affected Versions
NVIDIA / Jetson Xavier Series and Jetson Orin Series
All versions prior to 35.6.4
NVIDIA / Jetson Xavier Series and Jetson Orin Series
All versions prior to 36.5