Heap Overflow Vulnerability in NVIDIA TLK Kernel
CVE-2021-34385

6.3MEDIUM

Key Information:

Vendor

Nvidia
Status
Nvidia Jetson Tx1
Vendor
CVE Published:
30 June 2021

What is CVE-2021-34385?

NVIDIA's Trusty TLK kernel has a heap overflow vulnerability caused by an integer overflow during length calculations. This flaw could potentially allow an attacker to manipulate system memory leading to unexpected behavior or unauthorized access.

Affected Version(s)

NVIDIA Jetson TX1 All Jetson Linux versions prior to r32.5.1

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5205
x_refsource_CONFIRM

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.