CVE-2021-34377
Assigner: nvidia
Published: 2021-06-30T10:24:31
State: PUBLISHED
affected: product: NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX
vendor: NVIDIA
versions: status: affected
version: All Jetson Linux versions prior to r32.5.1
descriptions: value: Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 9 is missing. Improper restriction of operations within the bounds of a memory buffer might lead to escalation of privileges, information disclosure, and denial of service.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
version: 3.1
problemTypes: descriptions: description: information disclosure, escalation of privileges, denial of service
type: text
source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.0.9