What is CVE-2021-34386?

CVE-2021-34386 is a medium-severity vulnerability in Nvidia Jetson_linux, classified under Integer Overflow or Wraparound. CVSS score: 6.3/10. Published 2021-06-21.

How severe is CVE-2021-34386?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Integer overflow in Nvidia Jetson_linux

CVE-2021-34386

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of count and size can overflow, which might lead to heap overflows.

Vulnerability class: Integer Overflow

EPSS: 0.002 (10.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H.

Affected products

Nvidia Jetson_linux
Nvidia Jetson_tx1
Nvidia Jetson Tx1 — versions All Jetson Linux versions prior to r32.5.1

Weakness classification (CWE)

CWE-190 — Integer Overflow or Wraparound

References

psirt@nvidia.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-34386?: CVE-2021-34386 is a medium-severity vulnerability in Nvidia Jetson_linux, classified under Integer Overflow or Wraparound. CVSS score: 6.3/10. Published 2021-06-21.
How severe is CVE-2021-34386?: Medium severity. CVSS v3 base score is 6.3 out of 10.