7.3

CVE-2021-1108

NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack of input validation may lead to complete denial of service, partial integrity, and serious confidentiality loss for all processes in the system.

Data is provided by the National Vulnerability Database (NVD)
Nvidia ≫ Jetson Linux Version >= 32.1 < 32.6.1
   Nvidia ≫ Jetson Agx Xavier Version-
   Nvidia ≫ Jetson Nano Version-
   Nvidia ≫ Jetson Nano 2gb Version-
   Nvidia ≫ Jetson Tx1 Version-
   Nvidia ≫ Jetson Tx2 Version-
   Nvidia ≫ Jetson Tx2 Nx Version-
   Nvidia ≫ Jetson Xavier Nx Version-
Nvidia ≫ Shield Experience Version < 9.0
   Nvidia ≫ Shield Tv Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.11% 0.304
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.3 1.8 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
psirt@nvidia.com 7.3 1.8 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
CWE-191 Integer Underflow (Wrap or Wraparound)

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.