Approved changes feed: RSS · Atom

cpe:2.3:a:nvidia:nvidia_jetson_tx2_series,_tx2_nx,_agx_xavier_series,_xavier_nx:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNvidia (40c2793d-f37d-5eb8-a9a9-0c9926e4695b)
ProductNvidia Jetson Tx2 Series, Tx2 Nx, Agx Xavier Series, Xavier Nx (89b071c1-12f3-56c8-97db-5ee537f802d3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-34397 vulnerable 2026-06-08 05:32:13.139636 Details available
LOW (1.9)
Bootloader contains a vulnerability in NVIDIA MB2, which may cause free-the-wrong-heap, which may lead to limited denial of service.
Published: 2021-06-22T21:25:33.000Z
Updated: 2024-08-04T00:12:49.915Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34394 vulnerable 2026-06-08 05:32:13.132762 Details available
MEDIUM (4.2)
Trusty contains a vulnerability in the NVIDIA OTE protocol that is present in all TAs. An incorrect message stream deserialization allows an attacker to use the malicious CA that is run by the user to cause the buffer overflow, which may lead to information disclosure and data modification.
Published: 2021-06-22T21:25:29.000Z
Updated: 2024-08-04T00:12:50.176Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34393 vulnerable 2026-06-08 05:32:13.132215 Details available
MEDIUM (4.2)
Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not expose any command. This vulnerability might allow an attacker to exploit the deserializer to impact code execution, causing information disclosure.
Published: 2021-06-22T21:25:27.000Z
Updated: 2024-08-04T00:12:50.021Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34372 vulnerable 2026-06-08 05:32:13.095476 Details available
HIGH (8.2)
Trusty (the trusted OS produced by NVIDIA for Jetson devices) driver contains a vulnerability in the NVIDIA OTE protocol message parsing code where an integer overflow in a malloc() size calculation leads to a buffer overflow on the heap, which might result in information disclosure, escalation of privileges, and denial of service.
Published: 2021-06-22T21:25:21.000Z
Updated: 2024-08-04T00:12:49.639Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.