CVE-2021-1111 MEDIUM

CVE-2021-1111

Vendor Nvidia
Product NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX
Weakness CWE-119
Published August 11, 2021
Last update August 3, 2024

CVSS base score

6.7/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H

What the vulnerability does

01Description

Bootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an incorrect bounds check, which may lead to buffer overflow, resulting in limited information disclosure, limited data integrity, and denial of service across all components.

Key dates

02Disclosure timeline

August 11, 2021 CVE published
August 3, 2024 Record updated