CVEvulnerability

CVE-2021-1111

6.7 MEDIUM Published 2021-08-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-08-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119, CWE-125

Description

Bootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an incorrect bounds check, which may lead to buffer overflow, resulting in limited information disclosure, limited data integrity, and denial of service across all components.

Affected configurations

• nvidia jetson linux (>= 32.1 < 32.6.1)

Related

Weakness · CWE (2)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
  • CWE-125 Out-of-bounds Read weakness

References