CVE-2021-34385: Integer Overflow
Published Jun 30, 2021
·Updated
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calculation of a length could lead to a heap overflow.
Affected Software
2 affected components
Nvidia Jetson Linux<32.5.1
Nvidia Jetson TX1
Event History
Jun 30, 2021
CVE Published
via MITRE·10:24 AM
Data Sourced
via MITRE·10:24 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-34385?
CVE-2021-34385 is a vulnerability in the NVIDIA TLK kernel that can lead to a heap overflow due to an integer overflow in the calculation of a length.
2
What software is affected by CVE-2021-34385?
NVIDIA Jetson Linux versions up to 32.5.1 are affected by CVE-2021-34385.
3
How severe is CVE-2021-34385?
CVE-2021-34385 has a severity score of 6.7, which is considered medium.
4
How can I fix CVE-2021-34385?
To fix CVE-2021-34385, it is recommended to update NVIDIA Jetson Linux to a version later than 32.5.1.
5
Where can I find more information about CVE-2021-34385?
For more information about CVE-2021-34385, you can refer to the following link: https://nvidia.custhelp.com/app/answers/detail/a_id/5205