What is CVE-2021-34393?

CVE-2021-34393 is a medium-severity vulnerability in Nvidia Jetson_agx_xavier_16gb, classified under Deserialization of Untrusted Data. CVSS score: 4.2/10. Published 2021-06-22.

How severe is CVE-2021-34393?

Medium severity. CVSS v3 base score is 4.2 out of 10.

Deserialization in Nvidia Jetson_agx_xavier_16gb

CVE-2021-34393

Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not expose any command. This vulnerability might allow an attacker to exploit the deserializer to impact code execution, causi…

Vulnerability class: Insecure Deserialization

EPSS: 0.003 (21.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.2 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N.

Affected products

Weakness classification (CWE)

CWE-502 — Deserialization of Untrusted Data

References

psirt@nvidia.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-34393?: CVE-2021-34393 is a medium-severity vulnerability in Nvidia Jetson_agx_xavier_16gb, classified under Deserialization of Untrusted Data. CVSS score: 4.2/10. Published 2021-06-22.
How severe is CVE-2021-34393?: Medium severity. CVSS v3 base score is 4.2 out of 10.