1. Home
  2. CVE Database
  3. CVE-2021-1111
MEDIUM · 6.7

CVE-2021-1111

Bootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an incorrect bounds check, which may lead to buffer overflow, resulting in limited in...

Vulnerability Description

Bootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an incorrect bounds check, which may lead to buffer overflow, resulting in limited information disclosure, limited data integrity, and denial of service across all components.

CVSS Score

6.7

MEDIUM

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
HIGH

Affected Products

VendorProductVersions
NvidiaJetson Linux>= 32.1, < 32.6.1
NvidiaJetson Agx Xavier-
NvidiaJetson Tx2-
NvidiaJetson Tx2 Nx-
NvidiaJetson Xavier Nx-

Related Weaknesses (CWE)

CWE-119CWE-125

References

FAQ

What is CVE-2021-1111?

CVE-2021-1111 is a vulnerability with a CVSS score of 6.7 (MEDIUM). Bootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an incorrect bounds check, which may lead to buffer overflow, resulting in limited in...

How severe is CVE-2021-1111?

CVE-2021-1111 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-1111?

Check the references section above for vendor advisories and patch information. Affected products include: Nvidia Jetson Linux, Nvidia Jetson Agx Xavier, Nvidia Jetson Tx2, Nvidia Jetson Tx2 Nx, Nvidia Jetson Xavier Nx.