CVE-2021-34405 — Unchecked Return Value in Nvidia Shield Experience

CWE-252 — Unchecked Return ValueCWE-476 — NULL Pointer Dereference3 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 87.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Nvidia Shield ExperienceNvidia Shield TV
Timeline
PublishedJan 18
Latest updateJan 19

Description

NVIDIA Linux distributions contain a vulnerability in TrustZone’s TEE_Malloc function, where an unchecked return value causing a null pointer dereference may lead to denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5nvidia/shield_tvAll versions prior to SE 9.0

🔴Vulnerability Details

2
GHSA
GHSA-78wc-5whv-3wwg: NVIDIA Linux distributions contain a vulnerability in TrustZone’s TEE_Malloc function, where an unchecked return value causing a null pointer derefe↗2022-01-19
▶
CVEList
CVE-2021-34405: NVIDIA Linux distributions contain a vulnerability in TrustZone’s TEE_Malloc function, where an unchecked return value causing a null pointer derefere↗2022-01-18
▶
CVE-2021-34405 — Unchecked Return Value in Nvidia | cvebase