Vulnerability · Published Jan 18, 2022 · Assigned by nvidia

CVE-2021-34403

High 7.8

In plain English

A high-severity security flaw in SHIELD TV from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 76.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

NVIDIA Linux distributions contain a vulnerability in nvmap ioctl, which allows any user with a local account to exploit a use-after-free condition, leading to code privilege escalation, loss of confidentiality and integrity, or denial of service.

Affected products (as reported)

VendorProductVersions
NVIDIA SHIELD TV All versions prior to SE 9.0

References