CVE-2021-34386: Integer Overflow
Published Jun 21, 2021
·Updated
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of count and size can overflow, which might lead to heap overflows.
Affected Software
2 affected components
Nvidia Jetson Linux<32.5.1
Nvidia Jetson TX1
Event History
Jun 21, 2021
CVE Published
via MITRE·09:35 PM
Data Sourced
via MITRE·09:35 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-34386?
CVE-2021-34386 is a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause heap overflows.
2
How severe is CVE-2021-34386?
CVE-2021-34386 has a severity rating of 6.7 (Medium).
3
Which software is affected by CVE-2021-34386?
The NVIDIA Jetson Linux with a version up to 32.5.1 is affected by CVE-2021-34386.
4
How can CVE-2021-34386 be exploited?
CVE-2021-34386 can be exploited by triggering an integer overflow in the calloc size calculation.
5
Is NVIDIA Jetson TX1 vulnerable to CVE-2021-34386?
No, NVIDIA Jetson TX1 is not vulnerable to CVE-2021-34386.