Vulnerabilities > Nvidia > Jetson Linux

DATE CVE VULNERABILITY TITLE RISK
2021-06-30 CVE-2021-34384 Out-of-bounds Write vulnerability in Nvidia Jetson Linux
Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow could cause memory corruption, which might lead to denial of service or code execution.
local
low complexity
nvidia CWE-787
4.6
2021-06-30 CVE-2021-34385 Integer Overflow or Wraparound vulnerability in Nvidia Jetson Linux
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calculation of a length could lead to a heap overflow.
local
low complexity
nvidia CWE-190
4.6
2021-06-22 CVE-2021-34372 Integer Overflow or Wraparound vulnerability in Nvidia Jetson Linux
Trusty (the trusted OS produced by NVIDIA for Jetson devices) driver contains a vulnerability in the NVIDIA OTE protocol message parsing code where an integer overflow in a malloc() size calculation leads to a buffer overflow on the heap, which might result in information disclosure, escalation of privileges, and denial of service.
local
low complexity
nvidia CWE-190
4.6
2021-06-22 CVE-2021-34390 Integer Overflow or Wraparound vulnerability in Nvidia Jetson Linux
Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a specific SMC call that is triggered by the user, which may lead to denial of service.
local
low complexity
nvidia CWE-190
2.1
2021-06-22 CVE-2021-34391 Integer Overflow or Wraparound vulnerability in Nvidia Jetson Linux
Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a specific SMC call that is triggered by the user, which may lead to denial of service.
local
low complexity
nvidia CWE-190
4.9
2021-06-22 CVE-2021-34392 Integer Overflow or Wraparound vulnerability in Nvidia Jetson Linux
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the tz_map_shared_mem function can bypass boundary checks, which might lead to denial of service.
local
low complexity
nvidia CWE-190
2.1
2021-06-22 CVE-2021-34393 Deserialization of Untrusted Data vulnerability in Nvidia Jetson Linux
Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not expose any command.
local
low complexity
nvidia CWE-502
2.1
2021-06-22 CVE-2021-34394 Deserialization of Untrusted Data vulnerability in Nvidia Jetson Linux
Trusty contains a vulnerability in the NVIDIA OTE protocol that is present in all TAs.
local
low complexity
nvidia CWE-502
4.6
2021-06-22 CVE-2021-34395 Incorrect Default Permissions vulnerability in Nvidia Jetson Linux
Trusty TLK contains a vulnerability in its access permission settings where it does not properly restrict access to a resource from a user with local privileges, which might lead to limited information disclosure, a low risk of modifcations to data, and limited denial of service.
local
low complexity
nvidia CWE-276
4.6
2021-06-22 CVE-2021-34396 Unspecified vulnerability in Nvidia Jetson Linux
Bootloader contains a vulnerability in access permission settings where unauthorized software may be able to overwrite NVIDIA MB2 code, which would result in limited denial of service.
local
low complexity
nvidia
2.1