VULNERABILITY INTELLIGENCE

CVE-2021-34386

CVSS score6.3 MEDIUM
EPSS probability0.21%
CISA KEVNot currently listed
Published2021-06-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

Description

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of count and size can overflow, which might lead to heap overflows.

Weakness classification

  • nvd@nist.gov: CWE-190

Primary references