CVE-2021-34393

MEDIUM

NVIDIA Jetson Linux < 32.5.1 - Deserialization of Untrusted Data in TSEC TA

Title source: llm
STIX 2.1

Description

Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not expose any command. This vulnerability might allow an attacker to exploit the deserializer to impact code execution, causing information disclosure.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
https://nvidia.custhelp.com/app/answers/detail/a_id/5205

Scores

CVSS v3 4.2
EPSS 0.0017
EPSS Percentile 38.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

Details

CWE
CWE-502
Status published
Products (1)
nvidia/jetson_linux < 32.5.1
Published Jun 22, 2021
Tracked Since Feb 18, 2026