CVE-2021-34372
Trusty (the trusted OS produced by NVIDIA for Jetson devices) driver contains a vulnerability in the NVIDIA OTE protocol message parsing code where an integer…
High · published June 22, 2021
What it is
Trusty (the trusted OS produced by NVIDIA for Jetson devices) driver contains a vulnerability in the NVIDIA OTE protocol message parsing code where an integer overflow in a malloc() size calculation leads to a buffer overflow on the heap, which might result in information disclosure, escalation of privileges, and denial of service.
The record
Technical detail
- CVSS v3.1
- 8.2 · HIGH
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00256 · 16.3th percentile
- Published
- 2021-06-22T21:25Z
EPSS history
Timeline