PT-2022-10347 · Nvidia · Nvidia Android Images For T210

Published 2022-01-18 · Updated 2022-01-26 · CVE-2021-34404

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Android images for T210 (affected versions not specified)

Description The issue is related to a vulnerability in the Boot Read-Only Memory (BROM) of NVIDIA Android images for T210. Specifically, the failure to limit access to Advanced High-Performance Bus-Direct Memory Access (AHB-DMA) when BROM fails may allow an unprivileged attacker with physical access to cause denial of service or impact the integrity and confidentiality of the system beyond the security scope of BROM.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-34404

Affected Products

Nvidia Android Images For T210

References · 3

• https://nvidia.custhelp.com/app/answers/detail/a_id/5259 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-34404 · Security Note
• https://osv.dev/vulnerability/CVE-2021-34404 · Vendor Advisory