CVE-2021-34393

Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not expose any command. This vulnerability might allow an attacker to exploit the deserializer to impact code execution, causing information disclosure.

Score

CVSS 3.1 4.4 Medium

Status

Modified - psirt@nvidia.com

Published

2021-06-22

Last modified

2024-08-04

Weaknesses

CWE-502

Affected products

• Agx Xavier Series (Nvidia)
• Jetson Linux (Nvidia)
• Nvidia Jetson Tx2 Series (Nvidia)
• Tx2 Nx (Nvidia)
• Xavier Nx (Nvidia)

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/5205