Vulnerability Details : CVE-2022-42269
NVIDIA Trusted OS contains a vulnerability in an SMC call handler, where failure to validate untrusted input may allow a highly privileged local attacker to cause information disclosure and compromise integrity. The scope of the impact can extend to other components.
Vulnerability category: Input validationInformation leak
Exploit prediction scoring system (EPSS) score for CVE-2022-42269
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 6 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2022-42269
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
7.9
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N |
1.5
|
5.8
|
NIST |
|
7.9
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N |
1.5
|
5.8
|
NVIDIA Corporation |
CWE ids for CVE-2022-42269
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by:
- nvd@nist.gov (Primary)
- psirt@nvidia.com (Secondary)
References for CVE-2022-42269
-
https://nvidia.custhelp.com/app/answers/detail/a_id/5417
Security Bulletin: NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, Jetson TX1, Jetson TX2 Series (including Jetson TX2 NX), and Jetson Nano (including Jetson Nano 2GB) - November 2022 | NVIDIAVendor Advisory
Products affected by CVE-2022-42269
- cpe:2.3:o:nvidia:jetson_linux:*:*:*:*:*:*:*:*