CVE-2021-34394
- State
- Published
- Severity
- 4.2 Medium
- Published
- Jun 22, 2021
- Updated
- Aug 4, 2024
- Reserved
- Jun 9, 2021
Description
Trusty contains a vulnerability in the NVIDIA OTE protocol that is present in all TAs. An incorrect message stream deserialization allows an attacker to use the malicious CA that is run by the user to cause the buffer overflow, which may lead to information disclosure and data modification.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.2 Medium | CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H | nvidia |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
NVIDIA Jetson TX2 series, TX2 NX, AGX Xavier series, Xavier NXNVIDIA |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.