What is CVE-2021-1108?

CVE-2021-1108 is a high-severity vulnerability in Nvidia Jetson_agx_xavier, classified under Integer Underflow. CVSS score: 7.3/10. Published 2021-08-11.

How severe is CVE-2021-1108?

High severity. CVSS v3 base score is 7.3 out of 10.

Integer overflow in Nvidia Jetson_agx_xavier

CVE-2021-1108

NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack of input validation may lead to complete denial of service, partial integrity, and serious confidentiality loss for all…

EPSS: 0.002 (15.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H.

Affected products

Nvidia Jetson_agx_xavier
Nvidia Jetson Agx Xavier Series, Nx, Tx2 Nano, Nano 2gb, Tx1 — versions All Jetson Linux versions prior to r32.6.1
Nvidia Jetson_linux
Nvidia Jetson_nano
Nvidia Jetson_nano_2gb
Nvidia Jetson_tx1
Nvidia Jetson_tx2
Nvidia Jetson_tx2_nx
Nvidia Jetson_xavier_nx
Nvidia Shield_experience

Weakness classification (CWE)

CWE-191 — Integer Underflow

References

psirt@nvidia.com (x_refsource_MISC, Vendor Advisory)
psirt@nvidia.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-1108?: CVE-2021-1108 is a high-severity vulnerability in Nvidia Jetson_agx_xavier, classified under Integer Underflow. CVSS score: 7.3/10. Published 2021-08-11.
How severe is CVE-2021-1108?: High severity. CVSS v3 base score is 7.3 out of 10.