VULNERABILITY INTELLIGENCE

CVE-2021-34374

CVSS score7.7 HIGH
EPSS probability0.24%
CISA KEVNot currently listed
Published2021-06-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Description

Trusty contains a vulnerability in command handlers where the length of input buffers is not verified. This vulnerability can cause memory corruption, which may lead to information disclosure, escalation of privileges, and denial of service.

Weakness classification

  • nvd@nist.gov: CWE-20

Primary references