Nvidia Jetson TX1 vulnerabilities

11 vulnerabilities

Known vulnerabilities in Nvidia Jetson TX1, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2021-34387nvidiajetson_linux+1
EPSS score
0.21%
The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is identity-mapped by TLK with read, write, and execute permissions, which gives write access to kernel code and data that is otherwise mapped read only.
7.8CVE-2021-34381nvidiajetson_linux+1
EPSS score
0.21%
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow on the size parameter of the tz_map_shared_mem function, which might lead to denial of service, information disclosure, or data tampering.
5.5CVE-2021-34391nvidiajetson_linux+1
EPSS score
0.18%
Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a specific SMC call that is triggered by the user, which may lead to denial of service.
5.5CVE-2021-34390nvidiajetson_linux+1
EPSS score
0.19%
Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a specific SMC call that is triggered by the user, which may lead to denial of service.
5.5CVE-2021-34392nvidiajetson_linux+1
EPSS score
0.19%
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the tz_map_shared_mem function can bypass boundary checks, which might lead to denial of service.
6.7CVE-2021-34385nvidiajetson_linux+1
EPSS score
0.21%
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calculation of a length could lead to a heap overflow.
4.6CVE-2021-34395nvidiajetson_linux+1
EPSS score
0.18%
Trusty TLK contains a vulnerability in its access permission settings where it does not properly restrict access to a resource from a user with local privileges, which might lead to limited information disclosure, a low risk of modifcations to data, and limited denial of service.
7.9CVE-2021-34373nvidiajetson_linux+1
EPSS score
0.25%
Trusty trusted Linux kernel (TLK) contains a vulnerability in the NVIDIA TLK kernel where a lack of heap hardening could cause heap overflows, which might lead to information disclosure and denial of service.
7.8CVE-2021-34382nvidiajetson_linux+1
EPSS score
0.20%
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel’s tz_map_shared_mem function where an integer overflow on the size parameter causes the request buffer and the logging buffer to overflow, allowing writes to arbitrary addresses within the kernel.
6.7CVE-2021-34386nvidiajetson_linux+1
EPSS score
0.21%
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of count and size can overflow, which might lead to heap overflows.
6.7CVE-2019-5680nvidiajetson_tx1+1
EPSS score
0.45%
In NVIDIA Jetson TX1 L4T R32 version branch prior to R32.2, Tegra bootloader contains a vulnerability in nvtboot in which the nvtboot-cpu image is loaded without the load address first being validated, which may lead to code execution, denial of service, or escalation of privileges.