PT-2021-20493 · Nvidia · Nvidia Mb2

Frédéric Perriot · Published 2021-06-30 · Updated 2021-07-06 · CVE-2021-34380

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: NVIDIA MB2 (affected versions not specified)

Description: The issue is related to a potential heap overflow in the NVIDIA MB2 bootloader, which could lead to corruption of the heap metadata. This might result in arbitrary code execution, denial of service, and information disclosure during secure boot.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-34380

Affected Products

Nvidia Mb2

References · 4

• https://nvidia.custhelp.com/app/answers/detail/a_id/5205 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-34380 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-34380 · Security Note
• https://t.me/cvenotify/16888 · Telegram Post