CVE-2021-34402
Assigner: nvidia
Published: 2022-01-18T18:05:24
State: PUBLISHED
affected: product: SHIELD TV
vendor: NVIDIA
versions: status: affected
version: All versions prior to SE 9.0
descriptions: value: NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write to a memory location that is outside the intended boundary of the buffer, which may lead to denial of service, Information disclosure, loss of Integrity, or possible escalation of privileges.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-284
description: CWE-284 - Improper Restriction of Operations within the Bounds of a Memory Buffer
type: CWE