Auth bypass in Nvidia Jetson Orin Series
CVE-2025-33182
NVIDIA Jetson Linux contains a vulnerability in UEFI, where improper authentication may allow a privileged user to cause corruption of the Linux Device Tree. A successful exploitation of this vulnerability might lead to data tampering, den…
Vulnerability class: Broken Access Control
EPSS: 0.003 (21.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:L.
Affected products
- Nvidia Jetson Orin Series — versions 35.6.2 and earlier
- Nvidia Jetson Xavier Series — versions 35.6.2 and earlier
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-33182?
- CVE-2025-33182 is a high-severity vulnerability in Nvidia Jetson Orin Series, classified under Missing Authorization. CVSS score: 7.6/10. Published 2025-10-14.
- How severe is CVE-2025-33182?
- High severity. CVSS v3 base score is 7.6 out of 10.