CVE-2021-28693

xen/arm: Boot modules are not scrubbed The bootloader will load boot modules e.g. kernel, initramfs... in a temporary area before they are copied by Xen to each domain memory. To ensure sensitive data is not leaked from the modules, Xen must "scrub" them before handing the page over to the...

CVE-2021-34384

Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow could cause memory corruption, which might lead to denial of service or code execution...

CVE-2021-34384

CVE-2021-34384 : A heap overflow in the NVIDIA MB2 bootloader (Jetson platform) could cause memory corruption, potentially leading to denial of service or arbitrary code execution. NVIDIA’s security bulletin lists affected Jetson Linux releases and the updated version 32.5.2 (or the latest Debian...

CVE-2021-34383

Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow might lead to denial of service or escalation of privileges...

CVE-2021-34383

CVE-2021-34383 is a vulnerability in NVIDIA MB2 bootloader where a potential heap overflow could lead to denial of service or escalation of privileges. Affected component: NVIDIA MB2 bootloader used in Jetson devices. Root cause: heap overflow in the bootloader parsing/handling code (MB2) as desc...

CVE-2021-34380

CVE-2021-34380 refers to a vulnerability in the NVIDIA MB2 bootloader used on Jetson devices. The issue is described as a heap overflow that can corrupt heap metadata, with potential outcomes including arbitrary code execution, denial of service, and information disclosure during secure boot. Aff...

CVE-2021-34396

Bootloader contains a vulnerability in access permission settings where unauthorized software may be able to overwrite NVIDIA MB2 code, which would result in limited denial of service...

CVE-2021-34397

Bootloader contains a vulnerability in NVIDIA MB2, which may cause free-the-wrong-heap, which may lead to limited denial of service...

CVE-2021-34396

Bootloader contains a vulnerability in access permission settings where unauthorized software may be able to overwrite NVIDIA MB2 code, which would result in limited denial of service...

CVE-2021-34397

Bootloader contains a vulnerability in NVIDIA MB2, which may cause free-the-wrong-heap, which may lead to limited denial of service...

Design/Logic Flaw

Bootloader contains a vulnerability in access permission settings where unauthorized software may be able to overwrite NVIDIA MB2 code, which would result in limited denial of service...

Design/Logic Flaw

Bootloader contains a vulnerability in NVIDIA MB2, which may cause free-the-wrong-heap, which may lead to limited denial of service...

CVE-2021-34397

The CVE-2021-34397 issue affects NVIDIA Jetson devices (Jetson AGX Xavier, Xavier NX, Jetson TX1/TX2/TX2 NX, Nano/Nano 2GB) where the Bootloader (NVIDIA MB2) contains a heap-overflow vulnerability. The root cause is a potential heap overflow in MB2 during boot, which could lead to heap metadata c...

CVE-2021-34397

Bootloader contains a vulnerability in NVIDIA MB2, which may cause free-the-wrong-heap, which may lead to limited denial of service...

CVE-2021-34396

CVE-2021-34396 affects NVIDIA bootloader (MB2) where a vulnerability in access permission settings could allow unauthorized software to overwrite MB2 code, potentially causing limited denial of service. The issue is rooted in bootloader access control, as described in multiple sources, and is ass...

CVE-2021-34396

Bootloader contains a vulnerability in access permission settings where unauthorized software may be able to overwrite NVIDIA MB2 code, which would result in limited denial of service...

NVIDIA Jetson Chipsets Found Vulnerable to High-severity Flaws

U.S. graphics chip specialist NVIDIA has released software updates to address a total of 26 vulnerabilities impacting its Jetson system-on-module SOM series that could be abused by adversaries to escalate privileges and even lead to denial-of-service and information disclosure. Tracked from...

CVE-2021-34388

Bootloader contains a vulnerability in NVIDIA TegraBoot where a potential heap overflow might allow an attacker to control all the RAM after the heap block, leading to denial of service or code execution...

Heap overflow

Bootloader contains a vulnerability in NVIDIA TegraBoot where a potential heap overflow might allow an attacker to control all the RAM after the heap block, leading to denial of service or code execution...

CVE-2021-33887

Insufficient verification of data authenticity in Peloton TTR01 up to and including PTV55G allows an attacker with physical access to boot into a modified kernel/ramdisk without unlocking the bootloader...