CVE-2021-1070

State: Published
Severity: 7.1 High
Published: Jan 26, 2021
Updated: Aug 3, 2024
Reserved: Nov 12, 2020

Description

NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the apply_binaries.sh script used to install NVIDIA components into the root file system image, in which improper access control is applied, which may lead to an unprivileged user being able to modify system device tree files, leading to denial of service.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H	nvidia

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GBNVIDIA	All L4T versions prior to r32.5Affected

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5147

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.