cve/2021/CVE-2021-34379.md
2025-09-29 21:09:30 +02:00

18 lines
924 B
Markdown

### [CVE-2021-34379](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34379)
![](https://img.shields.io/static/v1?label=Product&message=NVIDIA%20Jetson%20AGX%20Xavier%20series%2C%20Jetson%20Xavier%20NX%2C%20Jetson%20TX2%20series%2C%20Jetson%20TX2%20NX&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=All%20Jetson%20Linux%20versions%20prior%20to%20r32.5.1%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=information%20disclosure%2C%20escalation%20of%20privileges%2C%20denial%20of%20service&color=brightgreen)
### Description
Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 10 is missing. The length of an I/O buffer parameter is not checked, which might lead to memory corruption.
### POC
#### Reference
- https://nvidia.custhelp.com/app/answers/detail/a_id/5205
#### Github
No PoCs found on GitHub currently.