CVE-2021-34380

Bootloader contains a vulnerability in NVIDIA MB2 where potential heap overflow might cause corruption of the heap metadata, which might lead to arbitrary code execution, denial of service, and information disclosure during secure boot.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:nvidia:jetson_linux:*:*:*:*:*:*:*:*
OR cpe:2.3:h:nvidia:jetson_agx_xavier_16gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_agx_xavier_32gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_agx_xavier_8gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_tx2:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_tx2_4gb:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_tx2_nx:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_tx2i:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:jetson_xavier_nx:-:*:*:*:*:*:*:*

History

21 Nov 2024, 06:10

Type Values Removed Values Added
CVSS v2 : 4.6
v3 : 7.8
v2 : 4.6
v3 : 7.0
References () https://nvidia.custhelp.com/app/answers/detail/a_id/5205 - Vendor Advisory () https://nvidia.custhelp.com/app/answers/detail/a_id/5205 - Vendor Advisory

Information

Published : 2021-06-30 11:15

Updated : 2024-11-21 06:10


NVD link : CVE-2021-34380

Mitre link : CVE-2021-34380

CVE.ORG link : CVE-2021-34380


JSON object : View

Products Affected

nvidia

  • jetson_agx_xavier_32gb
  • jetson_tx2
  • jetson_xavier_nx
  • jetson_agx_xavier_8gb
  • jetson_agx_xavier_16gb
  • jetson_tx2i
  • jetson_tx2_nx
  • jetson_linux
  • jetson_tx2_4gb
CWE
CWE-787

Out-of-bounds Write