11340 matches found
CVE-2021-34388
Bootloader contains a vulnerability in NVIDIA TegraBoot where a potential heap overflow might allow an attacker to control all the RAM after the heap block, leading to denial of service or code execution...
CVE-2021-34388
This CVE (CVE-2021-34388) affects NVIDIA Jetson/MB2 bootloader (TegraBoot). The vulnerability is a heap overflow in the bootloader that could allow an attacker to control RAM after the heap block, potentially enabling denial of service or code execution. Affected products include Jetson TX1, TX2 ...
CVE-2021-34386
CVE-2021-34386 affects NVIDIA Trusty TLK kernel (TLK) used in Jetson Linux environments. The root cause is an integer overflow in the calloc size calculation, where multiplication of count and size can overflow, potentially causing heap overflows. Connected sources (Red Hat advisory and NVIDIA se...
CVE-2021-34386
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of count and size can overflow, which might lead to heap overflows...
Bugs in NVIDIA’s Jetson Chipset Opens Door to DoS Attacks, Data Theft
Flaws impacting millions of internet of things IoT devices running NVIDIA’s Jetson chips open the door for a variety of hacks, including denial-of-service DoS attacks or the siphoning of data. NVIDIA released patches addressing nine high-severity vulnerabilities including eight additional bugs of...
Nvidia NVIDIA TLK 输入验证错误漏洞
Nvidia NVIDIA TLK is a scheduler from Nvidia Corporation of America that is used in conjunction with Trusted Firmware-A TF-A. NVIDIA TLK suffers from an Input Validation Error vulnerability that stems from Trusty TLK containing a vulnerability in the NVIDIA TLK kernel function, where a missing...
Nvidia NVIDIA MB2 缓冲区错误漏洞
Nvidia NVIDIA MB2 is a component of Nvidia Corporation, USA. A security vulnerability exists in NVIDIA MB2 that stems from a boot loader containing a vulnerability in NVIDIA MB2, where a potential heap overflow could result in heap metadata corruption. An attacker can exploit the vulnerability to...
NVIDIA OTE 代码问题漏洞
Nvidia NVIDIA OTE is a standalone, software-partitioned environment from Nvidia Corporation in the United States that provides Trusted Operations. The NVIDIA OTE suffers from a code issue vulnerability that stems from the fact that Trusty includes a vulnerability in all TAs where its deserializer...
Nvidia NVIDIA MB2 缓冲区错误漏洞
Nvidia NVIDIA MB2 is a component of Nvidia Corporation, USA. A security vulnerability exists in NVIDIA MB2 that stems from a boot loader containing a vulnerability in NVIDIA MB2, where a potential heap overflow could result in heap metadata corruption. An attacker can exploit the vulnerability to...
NVIDIA MB2 缓冲区错误漏洞
Nvidia NVIDIA MB2 is a component of Nvidia Corporation, USA. NVIDIA MB2 suffers from a buffer error vulnerability that stems from the boot loader containing a vulnerability in NVIDIA MB2, where a potential heap overflow could result in heap metadata corruption. An attacker could exploit the...
NVIDIA Jetson 缓冲区错误漏洞
Nvidia NVIDIA Jetson is an embedded system development module from Nvidia Corporation. NVIDIA Jetson suffers from a buffer error vulnerability that stems from Trusty including a vulnerability in the HDCP service TA that lacks a boundary check in Command 10. An attacker could exploit this...
Nvidia NVIDIA TLK 缓冲区错误漏洞
Nvidia NVIDIA TLK is a scheduler from Nvidia Corporation, USA, for use with Trusted Firmware-A TF-A. A security vulnerability exists in NVIDIA TLK, which stems from Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function, where a missing check allows exploitation of an integer...
NVIDIA Jetson 缓冲区错误漏洞
Nvidia NVIDIA Jetson is an embedded system development module from Nvidia Corporation. NVIDIA Jetson has a security vulnerability that stems from Trusty includes a vulnerability in all Trusted Applications TAs where a stack cookie is not randomized, which could result in a stack-based buffer...
NVIDIA Jetson 输入验证错误漏洞
Nvidia NVIDIA Jetson is an embedded system development module from Nvidia Corporation. NVIDIA Jetson suffers from an Input Validation Error vulnerability that stems from a vulnerability in Trusty's command handler that contains unvalidated input buffer lengths. An attacker could exploit this...
NVIDIA TLK 输入验证错误漏洞
Nvidia NVIDIA TLK is a scheduler from Nvidia Corporation of America that is used in conjunction with Trusted Firmware-A TF-A. NVIDIA TLK suffers from an Input Validation Error vulnerability that stems from Trusty TLK containing a vulnerability in the NVIDIA TLK kernel function, where a missing...
Nvidia NVIDIA MB2 缓冲区错误漏洞
Nvidia NVIDIA MB2 is a component of Nvidia Corporation, USA. NVIDIA MB2 suffers from a buffer error vulnerability that stems from the boot loader containing a vulnerability in NVIDIA MB2, where a potential heap overflow could result in heap metadata corruption. An attacker could exploit the...
Nvidia NVIDIA TLK 输入验证错误漏洞
Nvidia NVIDIA TLK is a scheduler from Nvidia Corporation of America for use with Trusted Firmware-A TF-A. NVIDIA TLK suffers from an Input Validation Error vulnerability that stems from Trusty TLK containing a vulnerability in the NVIDIA TLK kernel function, where a missing check allows...
NVIDIA TLK 访问控制错误漏洞
Nvidia NVIDIA TLK is a scheduler from Nvidia Corporation of America that works with Trusted Firmware-A TF-A. NVIDIA TLK suffers from an Access Control Error vulnerability that stems from Trusty TLK including a vulnerability in its access rights settings that does not properly restrict access to...
NVIDIA MB2 访问控制错误漏洞
Nvidia NVIDIA MB2 is a component of Nvidia Corporation, USA. NVIDIA MB2 suffers from an Access Control Error vulnerability that stems from the boot loader containing a vulnerability in NVIDIA MB2, where a potential heap overflow could lead to heap metadata corruption. An attacker could use this...
NVIDIA TLK 访问控制错误漏洞
Nvidia NVIDIA TLK is a scheduler from Nvidia Corporation of America for use with Trusted Firmware-A TF-A. The NVIDIA TLK suffers from an Access Control Error vulnerability that stems from the fact that the ARM® TrustZone technology, on which Trusty is based, contains a vulnerability in the access...