PT-2021-20493
CVE-2021-34380
·
Published
2021-06-30
·
Updated
2021-07-06
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
NVIDIA MB2 (affected versions not specified)
Description:
The issue is related to a potential heap overflow in the NVIDIA MB2 bootloader, which could lead to corruption of the heap metadata. This might result in arbitrary code execution, denial of service, and information disclosure during secure boot.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾