1. Home
  2. CVE Database
  3. CVE-2021-34394
MEDIUM · 4.2

CVE-2021-34394

Trusty contains a vulnerability in the NVIDIA OTE protocol that is present in all TAs. An incorrect message stream deserialization allows an attacker to use the malicious CA that is run by the user to...

Vulnerability Description

Trusty contains a vulnerability in the NVIDIA OTE protocol that is present in all TAs. An incorrect message stream deserialization allows an attacker to use the malicious CA that is run by the user to cause the buffer overflow, which may lead to information disclosure and data modification.

CVSS Score

4.2

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
NvidiaJetson Linux< 32.5.1
NvidiaJetson Agx Xavier 16Gb-
NvidiaJetson Agx Xavier 32Gb-
NvidiaJetson Agx Xavier 8Gb-
NvidiaJetson Tx2-
NvidiaJetson Tx2 4Gb-
NvidiaJetson Tx2 Nx-
NvidiaJetson Tx2I-
NvidiaJetson Xavier Nx-

Related Weaknesses (CWE)

CWE-502

References

FAQ

What is CVE-2021-34394?

CVE-2021-34394 is a vulnerability with a CVSS score of 4.2 (MEDIUM). Trusty contains a vulnerability in the NVIDIA OTE protocol that is present in all TAs. An incorrect message stream deserialization allows an attacker to use the malicious CA that is run by the user to...

How severe is CVE-2021-34394?

CVE-2021-34394 has been rated MEDIUM with a CVSS base score of 4.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-34394?

Check the references section above for vendor advisories and patch information. Affected products include: Nvidia Jetson Linux, Nvidia Jetson Agx Xavier 16Gb, Nvidia Jetson Agx Xavier 32Gb, Nvidia Jetson Agx Xavier 8Gb, Nvidia Jetson Tx2.