CVE-2021-1070

Severity: high (CVSS 7.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-01-26 · updated 2026-06-17

Description

NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the apply_binaries.sh script used to install NVIDIA components into the root file system image, in which improper access control is applied, which may lead to an unprivileged user being able to modify system device tree files, leading to denial of service.

Affected products

NVIDIA Linux For Tegra: before r32.5 — fixed in r32.5

How to fix

Upgrade to a fixed version: NVIDIA Linux For Tegra r32.5. Check the vendor advisory for mitigations.

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5147
https://nvidia.custhelp.com/app/answers/detail/a_id/5147

Get alerted when CVE-2021-1070 or the next vulnerability affects your stack