Read the docs
TI-2018-04592 Aliases CVE-2018-6239GHSA-55jm-9xwr-ww24

Information disclosure in NVIDIA Jetson TX2

Priority LOW 25CWE-200Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

NVIDIA Jetson TX2 contains a vulnerability by means of speculative execution where local and unprivileged code may access the contents of cached information in an unauthorized manner, which may lead to information disclosure. The updates apply to all versions prior to R28.3.

Why it matters now

EPSS 0.00372 31st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
NVIDIAJetson TX2R28.3—No fix listedCNA
  • Jetson TX2 VendorNVIDIA Affected R28.3 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:nvidia:jetson_tx2:*:*:*:*:*:*:*:*before r28.3VulnerableNVIDIA
  • cpe:2.3:a:nvidia:jetson_tx2:*:*:*:*:*:*:*:* Versions before r28.3 Vulnerable ·NVIDIA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-6239
  2. 2026-10-03 Alias added: GHSA-55jm-9xwr-ww24

References

Advisory 1

  • TI-2018-02664 Observable discrepancy in Intel Multiple CVSS 3.1MEDIUM 5.5
  • TI-2019-04018 NVIDIA Jetson TX1 and TX2 contain a vulnerability in the Linux for Tegra (L4T) operating… CVSS 3.0CRITICAL 9.1
  • TI-2018-04617 Incorrect permission assignment in NVIDIA Jetson Tegra TX2 CVSS 3.0HIGH 7.8
  • TI-2019-04019 Improper check for unusual conditions in NVIDIA Jetson TX2 CVSS 3.0MEDIUM 6.1
  • TI-2021-13435 NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller… CVSS 3.1MEDIUM 4.4
  • TI-2021-13434 NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller… CVSS 3.1MEDIUM 4.4
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences