CVEvulnerability

CVE-2021-34380

7.8 HIGH Published 2021-06-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-06-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-787

Description

Bootloader contains a vulnerability in NVIDIA MB2 where potential heap overflow might cause corruption of the heap metadata, which might lead to arbitrary code execution, denial of service, and information disclosure during secure boot.

Affected configurations

• nvidia jetson linux (< 32.5.1)

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References