CVE-2024-0148

https://notcve.org/view.php?id=CVE-2024-0148

25 Feb 2025 — NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrusted code. A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. The scope of the impacts can extend to other components. • https://nvidia.custhelp.com/app/answers/detail/a_id/5617 • CWE-447: Unimplemented or Unsupported Feature in UI •