CVE-2021-34372

HIGH

7.8

CVSS Score

Published: June 22, 2021 at 09:25 PM UTC

Updated: June 17, 2026 at 03:55 AM UTC

12 products affected across 1 vendorJetson LinuxJetson Xavier NxJetson TX2

Using NVIDIA Jetson TX2 series, TX2 NX, AGX Xavier series, Xavier NX by NVIDIA?

Get instant alerts when new vulnerabilities affect NVIDIA Jetson TX2 series, TX2 NX, AGX Xavier series, Xavier NX - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.3%

Description

Trusty (the trusted OS produced by NVIDIA for Jetson devices) driver contains a vulnerability in the NVIDIA OTE protocol message parsing code where an integer overflow in a malloc() size calculation leads to a buffer overflow on the heap, which might result in information disclosure, escalation of privileges, and denial of service.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Jetson Linux · NVIDIA

95%

v < 32.5.1All Jetson Linux versions prior to r32.5.1

Affected range stops below 32.5.1, so it looks safe — our inference, not a vendor statement

nvidia-jetson-agx-xavier-16gb (environment) · nvidia-jetson-agx-xavier-32gb (environment) · nvidia-jetson-agx-xavier-8gb (environment) · nvidia-jetson-nano (environment) · nvidia-jetson-nano-2gb (environment) · nvidia-jetson-tx1 (environment) · nvidia-jetson-tx2 (environment) · nvidia-jetson-tx2-4gb (environment) · nvidia-jetson-tx2-nx (environment) · nvidia-jetson-tx2i (environment) · nvidia-jetson-xavier-nx (environment)

Jetson Agx Xavier 16GB · NVIDIAdevice

80%

All versions

Jetson Agx Xavier 32GB · NVIDIAdevice

80%

All versions

Jetson Agx Xavier 8GB · NVIDIAdevice

80%

All versions

Jetson Nano · NVIDIAdevice

80%

All versions