Security Bulletin: NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, Jetson TX1, Jetson TX2 Series (including Jetson TX2 NX), and Jetson Nano (including Jetson Nano 2GB)- August 2021

NVIDIA has released a software update for NVIDIA® Jetson AGX Xavier™ series, Jetson Xavier™ NX, Jetson TX1, Jetson TX2 series including Jetson TX2 NX, and Jetson Nano™ devices including Jetson Nano 2GB in the NVIDIA JetPack™ software development kit SDK. The update addresses security issues that...

CVE-2021-34372

The CVE-2021-34372 entry concerns NVIDIA Jetson Trusty (TEE) driver: an integer overflow in the malloc() size calculation inside the NVIDIA OTE protocol message parsing code causes a heap buffer overflow. This can lead to information disclosure, privilege escalation, and denial of service on affe...

NVIDIA Jetson Chipsets Found Vulnerable to High-severity Flaws

U.S. graphics chip specialist NVIDIA has released software updates to address a total of 26 vulnerabilities impacting its Jetson system-on-module SOM series that could be abused by adversaries to escalate privileges and even lead to denial-of-service and information disclosure. Tracked from...

Bugs in NVIDIA’s Jetson Chipset Opens Door to DoS Attacks, Data Theft

Flaws impacting millions of internet of things IoT devices running NVIDIA’s Jetson chips open the door for a variety of hacks, including denial-of-service DoS attacks or the siphoning of data. NVIDIA released patches addressing nine high-severity vulnerabilities including eight additional bugs of...

NVIDIA Jetson 缓冲区错误漏洞

Nvidia NVIDIA Jetson is an embedded system development module from Nvidia Corporation. NVIDIA Jetson suffers from a buffer error vulnerability that stems from Trusty including a vulnerability in the HDCP service TA that lacks a boundary check in Command 11. An attacker could exploit this...

NVIDIA Jetson 输入验证错误漏洞

Nvidia NVIDIA Jetson is an embedded system development module from Nvidia Corporation. NVIDIA Jetson suffers from an Input Validation Error vulnerability that stems from a vulnerability in Trusty's command handler that contains unvalidated input buffer lengths. An attacker could exploit this...

NVIDIA Jetson 缓冲区错误漏洞

Nvidia NVIDIA Jetson is an embedded system development module from Nvidia Corporation. NVIDIA Jetson has a security vulnerability that stems from Trusty includes a vulnerability in all Trusted Applications TAs where a stack cookie is not randomized, which could result in a stack-based buffer...

NVIDIA Jetson 输入验证错误漏洞

The Nvidia NVIDIA Jetson TX2 and NVIDIA Jetson TX1 are both embedded system development modules from Nvidia. The NVIDIA Jetson suffers from an input validation error vulnerability that originates from the Trusty NVIDIA's trusted operating system for the Jetson devices driver containing a...

NVIDIA Jetson 缓冲区错误漏洞

Nvidia NVIDIA Jetson is an embedded system development module from Nvidia Corporation. NVIDIA Jetson suffers from a buffer error vulnerability that stems from Trusty including a vulnerability in the HDCP service TA that lacks the boundary check in Command 5. An attacker could exploit this...

NVIDIA Jetson 缓冲区错误漏洞

Nvidia NVIDIA Jetson is an embedded system development module from Nvidia Corporation. NVIDIA Jetson suffers from a buffer error vulnerability that stems from Trusty including a vulnerability in the HDCP service TA that lacks a boundary check in Command 10. An attacker could exploit this...

NVIDIA Jetson 代码问题漏洞

The Nvidia NVIDIA Jetson TX2 and NVIDIA Jetson TX1 are both embedded system development modules from Nvidia. The NVIDIA Jetson suffers from a code issue vulnerability that stems from Trusty's inclusion of a vulnerability in the TSEC TA that allows it to deserialize incoming messages even if the...

NVIDIA Jetson 缓冲区错误漏洞

Nvidia NVIDIA Jetson is an embedded system development module from Nvidia Corporation. NVIDIA Jetson suffers from a buffer error vulnerability that stems from Trusty including a vulnerability in the HDCP service TA that lacks a boundary check in Command 9. An attacker could exploit this...

Security Bulletin: NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, Jetson TX1, Jetson TX2 Series (including Jetson TX2 NX), and Jetson Nano (including Jetson Nano 2GB) - June 2021

NVIDIA has released a software update for NVIDIA® Jetson AGX Xavier™ series, Jetson Xavier™ NX, Jetson™ TX1, Jetson TX2 series including Jetson TX2 NX, and Jetson Nano™ devices including Jetson Nano 2GB in the NVIDIA JetPack™ SDK. This update addresses security issues that may lead to escalation ...

The vulnerability of the ARM System Memory Management Unit (SMMU) in NVIDIA Jetson TX2 processors allows a hacker to cause a system failure.

The vulnerability of the ARM System Memory Management Unit SMMU on NVIDIA Jetson TX2 processors lies in insufficient checking of exception states. Exploiting this vulnerability can allow attackers to cause system failures...

CVE-2021-1070

NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the applybinaries.sh script used to install NVIDIA components into the root file system image, in which improper access control is applied, which may lead to an...

CVE-2021-1070

NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the applybinaries.sh script used to install NVIDIA components into the root file system image, in which improper access control is applied, which may lead to an...

CVE-2021-1071

NVIDIA Tegra kernel in Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, all L4T versions prior to r32.5, contains a vulnerability in the INA3221 driver in which improper access control may lead to unauthorized users gaining access to system power usage data, which may lead...

Improper access control

NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the applybinaries.sh script used to install NVIDIA components into the root file system image, in which improper access control is applied, which may lead to an...

Improper access control

NVIDIA Tegra kernel in Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, all L4T versions prior to r32.5, contains a vulnerability in the INA3221 driver in which improper access control may lead to unauthorized users gaining access to system power usage data, which may lead...

Nvidia Squashes High-Severity Jetson DoS Flaw

Nvidia has patched three vulnerabilities affecting its Jetson lineup, which is a series of embedded computing boards designed for machine-learning applications, in things like autonomous robots, drones and more. A successful exploit could potentially cripple any such gadgets leveraging the affect...