Vulnerability · Published Jan 18, 2022 · Assigned by nvidia

CVE-2021-34402

Medium 6.7

In plain English

A medium-severity improper access control in SHIELD TV from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 3.1)6.7Medium

Exploit odds (30 days)0.3%top 78.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write to a memory location that is outside the intended boundary of the buffer, which may lead to denial of service, Information disclosure, loss of Integrity, or possible escalation of privileges.

Affected products (as reported)

Vendor	Product	Versions
NVIDIA	SHIELD TV	All versions prior to SE 9.0

Weakness: CWE-284 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5259 x_refsource_CONFIRM