Vulnerability · Published Jan 18, 2022 · Assigned by nvidia

CVE-2021-34406

Medium 4.7

In plain English

A medium-severity null pointer dereference in SHIELD TV from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).

Severity (CVSS 3.1)4.7Medium

Exploit odds (30 days)0.2%top 91.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

NVIDIA Tegra kernel driver contains a vulnerability in NVHost, where a specific race condition can lead to a null pointer dereference, which may lead to a system reboot.

Affected products (as reported)

Vendor	Product	Versions
NVIDIA	SHIELD TV	All versions prior to SE 9.0

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5259 x_refsource_CONFIRM