Nvidia Shield Experience — known CVE vulnerabilities

Every CVE whose affected-product data names Nvidia Shield Experience, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (17)

• CVE-2019-5679 — CVSS 7.8 (high): NVIDIA Shield TV Experience prior to v8.0, NVIDIA Tegra bootloader contains a vulnerability in nvtboot where the Trusted OS image is…
• CVE-2019-5681 — CVSS 7.8 (high): NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the custom NVIDIA API used in the mount system service where user…
• CVE-2019-5682 — CVSS 7.8 (high): NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the NVIDIA Games App where it improperly exports an Activity but…
• CVE-2019-5699 — CVSS 7.8 (high): NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra bootloader contains a vulnerability where the software performs an incorrect…
• CVE-2019-5700 — CVSS 7.8 (high): NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra software contains a vulnerability in the bootloader, where it does not validate…
• CVE-2021-1068 — CVSS 7.8 (high): NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVDEC component, in which an attacker can read from or write…
• CVE-2021-1106 — CVSS 7.8 (high): NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in…
• CVE-2021-1107 — CVSS 7.8 (high): NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVMAP_IOC_WRITE* paths, where improper access controls may lead to code…
• CVE-2021-34401 — CVSS 7.8 (high): NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER, where improper access control…
• CVE-2021-34403 — CVSS 7.8 (high): NVIDIA Linux distributions contain a vulnerability in nvmap ioctl, which allows any user with a local account to exploit a use-after-free…
• CVE-2021-1108 — CVSS 7.3 (high): NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack of input validation…
• CVE-2021-34404 — CVSS 7.1 (high): Android images for T210 provided by NVIDIA contain a vulnerability in BROM, where failure to limit access to AHB-DMA when BROM fails may…
• CVE-2021-1067 — CVSS 6.8 (medium): NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the implementation of the RPMB command status, in which an…
• CVE-2021-34402 — CVSS 6.7 (medium): NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write…
• CVE-2021-1069 — CVSS 6.1 (medium): NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVHost function, which may lead to abnormal reboot due to a…
• CVE-2021-34405 — CVSS 5.5 (medium): NVIDIA Linux distributions contain a vulnerability in TrustZone’s TEE_Malloc function, where an unchecked return value causing a null…
• CVE-2021-34406 — CVSS 4.7 (medium): NVIDIA Tegra kernel driver contains a vulnerability in NVHost, where a specific race condition can lead to a null pointer dereference…