CVE-2021-34386
Last modified
CVE-2021-34386 is a medium-severity vulnerability rated 6.7/10 on the CVSS scale. Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of count and size can overflow, which might lead to heap overflows.. EPSS estimates a 0.21% chance of exploitation in the next 30 days.
Description
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of count and size can overflow, which might lead to heap overflows.
Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Nvidia | Jetson Linux | < 32.5.1 |
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5205Vendor Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5205Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-34386?
How severe is CVE-2021-34386?
How do I fix CVE-2021-34386?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-34380Bootloader contains a vulnerability in NVIDIA MB2 where pote…7.8
- CVE-2021-34381Trusty TLK contains a vulnerability in the NVIDIA TLK kernel…7.8
- CVE-2021-34382Trusty TLK contains a vulnerability in the NVIDIA TLK kernel…7.8
- CVE-2021-34383Bootloader contains a vulnerability in NVIDIA MB2 where a po…6.7
- CVE-2021-34384Bootloader contains a vulnerability in NVIDIA MB2 where a po…7.8
- CVE-2021-34385Trusty TLK contains a vulnerability in the NVIDIA TLK kernel…6.7
- CVE-2021-34387The ARM TrustZone Technology on which Trusty is based on con…6.7
- CVE-2021-34388Bootloader contains a vulnerability in NVIDIA TegraBoot wher…7.8
- CVE-2021-34389Trusty contains a vulnerability in NVIDIA OTE protocol messa…5
- CVE-2021-3439HP has identified a potential vulnerability in BIOS firmware…7.8
- CVE-2021-34390Trusty contains a vulnerability in the NVIDIA TLK kernel fun…5.5
- CVE-2021-34391Trusty contains a vulnerability in the NVIDIA TLK kernel fun…5.5
Are you affected by CVE-2021-34386?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST