Vulnerabilities > CVE-2021-34389 - Memory Leak vulnerability in Nvidia Jetson Linux

Summary

Trusty contains a vulnerability in NVIDIA OTE protocol message parsing code, which is present in all the TAs. An incorrect bounds check can allow a local user through a malicious client to access memory from the heap in the TrustZone, which may lead to information disclosure.

Vulnerable Configurations

Common Weakness Enumeration (CWE)

• CWE-401 - Improper Release of Memory Before Removing Last Reference ('Memory Leak')

References