CVE-2021-1108 — Integer Underflow (Wrap or Wraparound) in Nvidia Jetson Linux

CWE-191 — Integer Underflow (Wrap or Wraparound)CWE-20 — Improper Input Validation3 documents3 sources
Severity
7.3HIGHNVD
EPSS
0.1%
top 70.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Nvidia Jetson LinuxNvidia Shield ExperienceNvidia Shield TV
Timeline
PublishedAug 11
Latest updateMay 24

Description

NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack of input validation may lead to complete denial of service, partial integrity, and serious confidentiality loss for all processes in the system.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:HExploitability: 1.8 | Impact: 5.5

Affected Packages3 packages

▶NVDnvidia/jetson_linux32.1 — 32.6.1
▶CVEListV5nvidia/shield_tvAll Shield TV versions prior to SE 9.0

🔴Vulnerability Details

2
GHSA
GHSA-xjr6-xhwq-23jv: NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack of input validation may lead t↗2022-05-24
▶
CVEList
CVE-2021-1108: NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack of input validation may lead t↗2021-08-11
▶
CVE-2021-1108 — Integer Underflow (Wrap or Wraparound) | cvebase