Vulnerability · Published Jan 18, 2022 · Assigned by nvidia

CVE-2021-34405

Medium 5.5

In plain English

A medium-severity security flaw in SHIELD TV from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 86.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

NVIDIA Linux distributions contain a vulnerability in TrustZone’s TEE_Malloc function, where an unchecked return value causing a null pointer dereference may lead to denial of service.

Affected products (as reported)

VendorProductVersions
NVIDIA SHIELD TV All versions prior to SE 9.0

References