CVE-2022-28194

CVE-2022-28194 is a medium-severity memory buffer overflow vulnerability in the Cboot module of the NVIDIA Jetson Linux Driver Package, affecting Jetson AGX Xavier, Jetson Linux, and Jetson Xavier NX. If TFTP is enabled, a local attacker with elevated privileges can exploit this to achieve code execution, compromise integrity, cause limited denial of service, and impact confidentiality. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.