CVE-2021-34391

Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a specific SMC call that is triggered by the user, which may lead to denial of service...

CVE-2021-34391

CVE-2021-34391 relates to Trusty TLK on NVIDIA Jetson/Trusty in which the TZ map shared memory size parameter can overflow due to insufficient input validation. The root cause is an integer overflow in the NVIDIA TLK kernel function tz_map_shared_mem, which may enable denial of service and, per s...

CVE-2021-34390

Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a specific SMC call that is triggered by the user, which may lead to denial of service...

CVE-2021-34390

CVE-2021-34390 concerns Trusty TLK (NVIDIA TLK kernel) where a lack of checks enables an integer overflow via a user-triggered SMC call, potentially causing denial of service. The connected NVIDIA bulletin (Security Updates) confirms affected Jetson products and recommends updating to newer Debia...

PT-2021-20505

Name of the Vulnerable Software and Affected Versions: Trusty TLK affected versions not specified Description: The issue is related to an integer overflow in the tz map shared mem function within the NVIDIA TLK kernel, which can bypass boundary checks. This might lead to a denial of service...

PT-2021-20508

Name of the Vulnerable Software and Affected Versions: Trusty TLK affected versions not specified Description: The issue is related to improper restriction of access to a resource from a user with local privileges, potentially leading to limited information disclosure, a low risk of modifications...

PT-2021-20504

Name of the Vulnerable Software and Affected Versions: Trusty affected versions not specified Description: The issue is related to a lack of checks in the NVIDIA TLK kernel function, allowing the exploitation of an integer overflow through a specific SMC call triggered by the user. This may lead ...

PT-2021-20503

Name of the Vulnerable Software and Affected Versions: Trusty affected versions not specified Description: The issue is related to a lack of checks in the NVIDIA TLK kernel function, allowing the exploitation of an integer overflow. This can be triggered by a user through a specific SMC call,...

CVE-2021-34395: Incorrect Default Permissions

Trusty TLK contains a vulnerability in its access permission settings where it does not properly restrict access to a resource from a user with local privileges, which might lead to limited information disclosure, a low risk of modifcations to data, and limited denial of service...

CVE-2021-34391: Integer Overflow or Wraparound

Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a specific SMC call that is triggered by the user, which may lead to denial of service...

CVE-2021-34392: Integer Overflow or Wraparound

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the tzmapsharedmem function can bypass boundary checks, which might lead to denial of service...

CVE-2021-34390: Integer Overflow or Wraparound

Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a specific SMC call that is triggered by the user, which may lead to denial of service...

CVE-2021-34386

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of count and size can overflow, which might lead to heap overflows...

CVE-2021-34386

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of count and size can overflow, which might lead to heap overflows...

CVE-2021-34387

The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is identity-mapped by TLK with read, write, and execute permissions, which gives write access to kernel code and data that is...

Design/Logic Flaw

The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is identity-mapped by TLK with read, write, and execute permissions, which gives write access to kernel code and data that is...

CVE-2021-34386

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of count and size can overflow, which might lead to heap overflows...

Integer overflow

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of count and size can overflow, which might lead to heap overflows...

CVE-2021-34387

The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is identity-mapped by TLK with read, write, and execute permissions, which gives write access to kernel code and data that is...

CVE-2021-34387

CVE-2021-34387 affects NVIDIA Jetson Trusty TLK/Trusty on TrustZone. The vulnerability arises from access permission settings where the DRAM region reserved for TrustZone is identity-mapped by the TLK with read, write, and execute permissions, allowing write access to kernel code and data that sh...