Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2021-34372

Trusty (the trusted OS produced by NVIDIA for Jetson devices) driver contains a vulnerability in the NVIDIA OTE protocol message parsing code where an integer overflow in a malloc(

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
nvidia

Description

Trusty (the trusted OS produced by NVIDIA for Jetson devices) driver contains a vulnerability in the NVIDIA OTE protocol message parsing code where an integer overflow in a malloc() size calculation leads to a buffer overflow on the heap, which might result in information disclosure, escalation of privileges, and denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NVIDIA NVIDIA Jetson TX2 series, TX2 NX, AGX Xavier series, Xavier NX

  • All Jetson Linux versions prior to r32.5.1affected

References