CVE-2021-34402

MEDIUM

Nvidia Shield Experience < 9.0 - Out-of-Bounds Write

Title source: rule
STIX 2.1

Description

NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write to a memory location that is outside the intended boundary of the buffer, which may lead to denial of service, Information disclosure, loss of Integrity, or possible escalation of privileges.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
https://nvidia.custhelp.com/app/answers/detail/a_id/5259

Scores

CVSS v3 6.7
EPSS 0.0005
EPSS Percentile 15.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-284 CWE-125 CWE-787
Status published
Products (1)
nvidia/shield_experience < 9.0
Published Jan 18, 2022
Tracked Since Feb 18, 2026