What’s Vulnerable › Vulnerabilities

CVE-2025-23270

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-07-17 · updated 2026-06-17
• Weakness: CWE-392

Description

NVIDIA Jetson Linux contains a vulnerability in UEFI Management mode, where an unprivileged local attacker may cause exposure of sensitive information via a side channel vulnerability. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.

Affected products

• NVIDIA Jetson Orin, IGX Orin and Xavier Devices: NVIDIA Jetson Orin Series All versions prior to JP5.x: 35.6.2, NVIDIA Jetson Orin Series All versions prior to JP6.x: 36.4.4, NVIDIA Xavier Series All versions prior to JP5.x: 35.6.2, IGX Orin All versions prior to IGX 1.1.2

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/5662

Get alerted when CVE-2025-23270 or the next vulnerability affects your stack