CVE-2021-34386

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of count and size can overflow, which might lead to heap overflows...

CVE-2021-34386

CVE-2021-34386 affects NVIDIA Trusty TLK kernel (TLK) used in Jetson Linux environments. The root cause is an integer overflow in the calloc size calculation, where multiplication of count and size can overflow, potentially causing heap overflows. Connected sources (Red Hat advisory and NVIDIA se...

CVE-2021-34386: Integer Overflow or Wraparound

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of count and size can overflow, which might lead to heap overflows...

NVIDIA TLK 输入验证错误漏洞

Nvidia NVIDIA TLK is a scheduler from Nvidia Corporation of America for use with Trusted Firmware-A TF-A. NVIDIA TLK suffers from an Input Validation Error vulnerability that stems from Trusty TLK containing a vulnerability in the NVIDIA TLK kernel function, where a missing check allows...

Nvidia NVIDIA TLK 输入验证错误漏洞

Nvidia NVIDIA TLK is a scheduler from Nvidia Corporation of America for use with Trusted Firmware-A TF-A. NVIDIA TLK suffers from an Input Validation Error vulnerability that stems from Trusty TLK containing a vulnerability in the NVIDIA TLK kernel function, where a missing check allows...

PT-2021-20499

Name of the Vulnerable Software and Affected Versions: Trusty TLK affected versions not specified Description: The issue is related to an integer overflow in the calloc size calculation within the NVIDIA TLK kernel. This overflow can occur due to the multiplication of count and size, potentially...

CVE-2018-6243

NVIDIA Tegra TLK Widevine Trust Application contains a vulnerability in which missing the input parameter checking of video metadata count may lead to Arbitrary Code Execution, Denial of Service or Escalation of Privileges. Android ID: A-72315075. Severity Rating: High. Version: N/A...

Design/Logic Flaw

NVIDIA Tegra TLK Widevine Trust Application contains a vulnerability in which missing the input parameter checking of video metadata count may lead to Arbitrary Code Execution, Denial of Service or Escalation of Privileges. Android ID: A-72315075. Severity Rating: High. Version: N/A...

CVE-2018-6243

CVE-2018-6243 affects the NVIDIA Tegra TLK Widevine Trust Application in Google Pixel C devices (Pixel C TrustZone) with the Widevine TLK component. Root cause: missing input parameter checking for video metadata count, enabling potential arbitrary code execution, denial of service, or privilege ...

PT-2019-11013

Name of the Vulnerable Software and Affected Versions: NVIDIA Tegra TLK Widevine Trust Application affected versions not specified Description: The issue is related to missing input parameter checking of video metadata count, which may lead to Arbitrary Code Execution, Denial of Service, or...

CVE-2018-6243: Improper Input Validation

NVIDIA Tegra TLK Widevine Trust Application contains a vulnerability in which missing the input parameter checking of video metadata count may lead to Arbitrary Code Execution, Denial of Service or Escalation of Privileges. Android ID: A-72315075. Severity Rating: High. Version: N/A...

Integer overflow

In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due to an integer overflow which could lead to local escalation of privilege with no additional execution privileges needed. User interaction not needed for exploitation. This issue...

CVE-2017-6290

In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due to an integer overflow which could lead to local escalation of privilege with no additional execution privileges needed. User interaction not needed for exploitation. This issue...

CVE-2017-6290

In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due to an integer overflow which could lead to local escalation of privilege with no additional execution privileges needed. User interaction not needed for exploitation. This issue...

CVE-2017-6290

CVE-2017-6290 affects NVIDIA TLK TrustZone in Tegra on SHIELD TV. It describes a potential local escalation of privilege via an out-of-bounds write caused by an integer overflow, with no user interaction required. NVIDIA’s bulletin redirects to Android patching: affected SHIELD TV platforms requi...

PT-2018-8336

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-06-05 security patch level Description The issue is related to an integer overflow in NVIDIA TLK TrustZone, which could lead to a possible out of bounds write. This could result in local escalation of privilege...

CVE-2017-6290: Integer Overflow or Wraparound

In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due to an integer overflow which could lead to local escalation of privilege with no additional execution privileges needed. User interaction not needed for exploitation. This issue...

Google Android NVIDIA component elevation of privilege vulnerability (CNVD-2018-13161)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android NVIDIA component TLK TrustZone. An attacker can exploit this vulnerability to achieve elevation of privilege...