CVE-2025-23270 — NVIDIA / Jetson Orin, IGX Orin and Xavier Devices

Description (CNA)

NVIDIA Jetson Linux contains a vulnerability in UEFI Management mode, where an unprivileged local attacker may cause exposure of sensitive information via a side channel vulnerability. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.

Affected (CNA)

Vendor / product	Versions
NVIDIA / Jetson Orin, IGX Orin and Xavier Devices	affected NVIDIA Jetson Orin Series All versions prior to JP5.x: 35.6.2; affected NVIDIA Jetson Orin Series All versions prior to JP6.x: 36.4.4; affected NVIDIA Xavier Series All versions prior to JP5.x: 35.6.2; affected IGX Orin All versions prior to IGX 1.1.2

CWE

CWE-392

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5662

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.