Access Control Vulnerability in NVIDIA Android Images for T210

CVE-2021-34404

What is CVE-2021-34404?

NVIDIA's Android images for the T210 platform exhibit a vulnerability in the Boot ROM (BROM). This vulnerability arises from inadequate access control over the AHB-DMA interface when BROM fails. An unprivileged attacker with physical access to the device can exploit this vulnerability to cause a denial of service. Additionally, it poses risks to data integrity and confidentiality, allowing unauthorized actions that exceed the security measures provided by BROM.

References