Vulnerabilities > CVE-2021-34393 - Deserialization of Untrusted Data vulnerability in Nvidia Jetson Linux

047910
CVSS 4.4 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
local
low complexity
nvidia
CWE-502

Summary

Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not expose any command. This vulnerability might allow an attacker to exploit the deserializer to impact code execution, causing information disclosure.

Common Weakness Enumeration (CWE)