Design/Logic Flaw

Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow could cause memory corruption, which might lead to denial of service or code execution...

CVE-2021-34385

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calculation of a length could lead to a heap overflow...

CVE-2021-34373

Trusty trusted Linux kernel TLK contains a vulnerability in the NVIDIA TLK kernel where a lack of heap hardening could cause heap overflows, which might lead to information disclosure and denial of service...

Integer overflow

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow on the size parameter of the tzmapsharedmem function, which might lead to denial of service, information disclosure, or data tampering...

CVE-2021-34385

Affected product: NVIDIA Trusty TLK (TLK kernel) used in Jetson/Linux Trusty. Vulnerability: an integer overflow in the calculation of a length within the TLK kernel can cause a heap overflow. Impact: potential heap overflow with accompanying risks described in CVE-2021-34385 (information disclos...

CVE-2021-34385

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calculation of a length could lead to a heap overflow...

CVE-2021-34384

CVE-2021-34384 : A heap overflow in the NVIDIA MB2 bootloader (Jetson platform) could cause memory corruption, potentially leading to denial of service or arbitrary code execution. NVIDIA’s security bulletin lists affected Jetson Linux releases and the updated version 32.5.2 (or the latest Debian...

CVE-2021-34384

Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow could cause memory corruption, which might lead to denial of service or code execution...

CVE-2021-34383

CVE-2021-34383 is a vulnerability in NVIDIA MB2 bootloader where a potential heap overflow could lead to denial of service or escalation of privileges. Affected component: NVIDIA MB2 bootloader used in Jetson devices. Root cause: heap overflow in the bootloader parsing/handling code (MB2) as desc...

CVE-2021-34383

Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow might lead to denial of service or escalation of privileges...

CVE-2021-34382

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel’s tzmapsharedmem function where an integer overflow on the size parameter causes the request buffer and the logging buffer to overflow, allowing writes to arbitrary addresses within the kernel...

CVE-2021-34382

CVE-2021-34382 affects NVIDIA Trusty TLK kernel’s tz_map_shared_mem, where an integer overflow in the size parameter causes the request and logging buffers to overflow, allowing writes to arbitrary kernel addresses. Affected products in the NVIDIA Jetson line include Jetson AGX Xavier, Jetson Xav...

CVE-2021-34381

CVE-2021-34381 affects NVIDIA Trusty TLK: the vulnerability lies in the TLK kernel function where insufficient checks allow an integer overflow in the size parameter of the tz_map_shared_mem function. This could lead to denial of service, information disclosure, or data tampering. Affected produc...

CVE-2021-34381

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow on the size parameter of the tzmapsharedmem function, which might lead to denial of service, information disclosure, or data tampering...

CVE-2021-34380

CVE-2021-34380 refers to a vulnerability in the NVIDIA MB2 bootloader used on Jetson devices. The issue is described as a heap overflow that can corrupt heap metadata, with potential outcomes including arbitrary code execution, denial of service, and information disclosure during secure boot. Aff...

CVE-2021-34373

CVE-2021-34373 affects NVIDIA’s Trusty TLK (Jetson TLK kernel) used in Jetson TX1/TX2/Xavier series; root cause is lack of heap hardening leading to heap overflows in the TLK kernel, enabling information disclosure and denial of service. NVIDIA’s security bulletin notes the vulnerability in the T...

CVE-2021-34373

Trusty trusted Linux kernel TLK contains a vulnerability in the NVIDIA TLK kernel where a lack of heap hardening could cause heap overflows, which might lead to information disclosure and denial of service...

NVIDIA GeForce Experience Cross-Site Scripting Vulnerability

NVIDIA GeForce Experience is a set of automatic graphics card update tools from Nvidia Corporation. A cross-site scripting vulnerability exists in NVIDIA GeForce Experience, which could be exploited by attackers to trick users into clicking on a maliciously formatted link in their browser and...

NVIDIA Patches High-Severity GeForce Spoof-Attack Bug

NVIDIA gaming graphics software called GeForce Experience, bundled with the chipmaker’s popular GTX GPU, is flawed and opens the door to a remote attacker that can exploit the bug to steal or manipulate data on a vulnerable Windows computer. NVIDIA notified customers late last week of the bug and...

CVE-2021-1073

NVIDIA GeForce Experience, all versions prior to 3.23, contains a vulnerability in the login flow when a user tries to log in by using a browser, while, at the same time, any other web page is loaded in other tabs of the same browser. In this situation, the web page can get access to the token of...