CVE-2021-34402

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-01-18 · updated 2026-06-17
Weakness: CWE-284

Description

NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write to a memory location that is outside the intended boundary of the buffer, which may lead to denial of service, Information disclosure, loss of Integrity, or possible escalation of privileges.

Affected products

NVIDIA SHIELD TV: before 9.0 — fixed in 9.0

How to fix

Upgrade to a fixed version: NVIDIA SHIELD TV 9.0. Check the vendor advisory for mitigations.

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5259
https://nvidia.custhelp.com/app/answers/detail/a_id/5259

Get alerted when CVE-2021-34402 or the next vulnerability affects your stack