CVE-2021-34393

MEDIUM

Nvidia Jetson Linux < 32.5.1 - Insecure Deserialization

Title source: rule

Description

Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not expose any command. This vulnerability might allow an attacker to exploit the deserializer to impact code execution, causing information disclosure.

References (1)

[Vendor Advisory] https://nvidia.custhelp.com/app/answers/detail/a_id/5205

Scores

CVSS v3 4.2

EPSS 0.0017

EPSS Percentile 38.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

Classification

CWE

CWE-502

Status published

Affected Products (1)

nvidia/jetson_linux < 32.5.1

Timeline

Published Jun 22, 2021

Tracked Since Feb 18, 2026