NVIDIA Linux For Tegra vulnerabilities

4 CVEs affecting NVIDIA Linux For Tegra, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-1071, published 2021-01-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-14491, published 2017-10-04. Critical severity, CVSS 9.8. EPSS: 84.9% chance of exploitation in the next 30 days. Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
CVE-2021-1069, published 2021-01-20. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVHost function, which may lead to abnormal reboot due to a null pointer reference, causing data loss.
CVE-2021-1070, published 2021-01-26. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the apply_binaries.sh script used to install NVIDIA components…
CVE-2021-1071, published 2021-01-26. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA Tegra kernel in Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, all L4T versions prior to r32.5, contains a vulnerability in the INA3221 driver in which improper…