NVIDIA NVDEC Vulnerability in Tegra Kernel Driver
CVE-2021-34402

6.7MEDIUM

Key Information:

Vendor

Nvidia
Status
Shield Tv
Vendor
CVE Published:
18 January 2022

What is CVE-2021-34402?

A critical vulnerability exists in the NVIDIA Tegra kernel driver, specifically within the NVIDIA NVDEC component. This flaw allows users with elevated privileges to potentially access or manipulate memory outside of intended constraints. Such unauthorized access could lead to denial of service, the exposure of sensitive information, or potential privilege escalation, thereby compromising system integrity and security.

Affected Version(s)

SHIELD TV All versions prior to SE 9.0

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5259
x_refsource_CONFIRM

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.