Buffer overflow in NVIDIA Jetson Agx Xavier 16gb
CVE-2021-34380
Bootloader contains a vulnerability in NVIDIA MB2 where potential heap overflow might cause corruption of the heap metadata, which might lead to arbitrary code execution, denial of service, and information disclosure during secure boot.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.0 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.002 (14.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 15th percentile — 14.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- NVIDIA Jetson Agx Xavier 16gb
- NVIDIA Jetson Agx Xavier 32gb
- NVIDIA Jetson Agx Xavier 8gb
- NVIDIA Jetson Linux
- NVIDIA Jetson Tx2
- NVIDIA Jetson Tx2 4gb
- NVIDIA Jetson Tx2i
- NVIDIA Jetson Tx2 Nx
- NVIDIA Jetson Xavier Nx
- NVIDIA Jetson Tx1, Tx2 Series, Nx, Agx Xavier Nano And 2gb — versions All Jetson Linux versions prior to r32.5.1
Weakness classification (CWE)
References
- nvidia.custhelp.com/app/answers/detail/a_id/5205 (Vendor Advisory)
Frequently asked questions
- What is CVE-2021-34380?
- CVE-2021-34380 is a high-severity vulnerability in NVIDIA Jetson Agx Xavier 16gb, classified under Out-of-bounds Write. CVSS score: 7.0/10. Published 2021-06-30.
- How severe is CVE-2021-34380?
- High severity. CVSS v3 base score is 7.0 out of 10.