CVE-2021-34380
Last modified
CVE-2021-34380 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Bootloader contains a vulnerability in NVIDIA MB2 where potential heap overflow might cause corruption of the heap metadata, which might lead to arbitrary code execution, denial of service, and information disclosure during secure boot.. EPSS estimates a 0.25% chance of exploitation in the next 30 days.
Description
Bootloader contains a vulnerability in NVIDIA MB2 where potential heap overflow might cause corruption of the heap metadata, which might lead to arbitrary code execution, denial of service, and information disclosure during secure boot.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Nvidia | Jetson Linux | < 32.5.1 |
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5205Vendor Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5205Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-34380?
How severe is CVE-2021-34380?
How do I fix CVE-2021-34380?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-34375Trusty contains a vulnerability in all trusted applications …6.7
- CVE-2021-34376Trusty contains a vulnerability in the HDCP service TA where…6.7
- CVE-2021-34377Trusty contains a vulnerability in the HDCP service TA where…6.7
- CVE-2021-34378Trusty contains a vulnerability in the HDCP service TA where…6.7
- CVE-2021-34379Trusty contains a vulnerability in the HDCP service TA where…6.7
- CVE-2021-3438A potential buffer overflow in the software drivers for cert…7.8
- CVE-2021-34381Trusty TLK contains a vulnerability in the NVIDIA TLK kernel…7.8
- CVE-2021-34382Trusty TLK contains a vulnerability in the NVIDIA TLK kernel…7.8
- CVE-2021-34383Bootloader contains a vulnerability in NVIDIA MB2 where a po…6.7
- CVE-2021-34384Bootloader contains a vulnerability in NVIDIA MB2 where a po…7.8
- CVE-2021-34385Trusty TLK contains a vulnerability in the NVIDIA TLK kernel…6.7
- CVE-2021-34386Trusty TLK contains a vulnerability in the NVIDIA TLK kernel…6.7
Are you affected by CVE-2021-34380?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST