{"id":"CVE-2021-34374","url":"https://www.cyber-defence.io/tools/cve/CVE-2021-34374","generatedAt":"2026-10-27T22:32:08.057Z","title":"Trusty contains a vulnerability in command handlers where the length of input buffers is not verified.","description":"Trusty contains a vulnerability in command handlers where the length of input buffers is not verified. This vulnerability can cause memory corruption, which may lead to information disclosure, escalation of privileges, and denial of service.","published":"2021-06-30T11:15:08.000Z","lastModified":"2026-06-17T03:55:44.000Z","status":"Modified","sourceIdentifier":"psirt@nvidia.com","cvss":{"version":"3.1","score":6.7,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-20"],"affected":["nvidia/jetson linux"],"epss":{"score":0.00242,"percentile":0.1527,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5205","tags":["Vendor Advisory"],"source":"psirt@nvidia.com"},{"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5205","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-34374","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}