Integer Overflow Vulnerability in NVIDIA Trusty TLK Kernel
CVE-2021-34386

6.3MEDIUM

Key Information:

Vendor

Nvidia
Status
Nvidia Jetson Tx1
Vendor
CVE Published:
21 June 2021

What is CVE-2021-34386?

The NVIDIA Trusty TLK kernel contains a critical vulnerability resulting from an integer overflow in the size calculation within the calloc function. This issue occurs when the multiplication of count and size exceeds the maximum limit, potentially leading to heap overflows. Such vulnerabilities can be exploited to execute arbitrary code or cause system crashes, undermining the integrity and security of affected systems.

Affected Version(s)

NVIDIA Jetson TX1 All Jetson Linux versions prior to r32.5.1

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5205
x_refsource_CONFIRM

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.