CVE-2021-34402CWE-284

NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write to a memory location…

Medium · published January 18, 2022

CVSS v3.1
6.7
EPSS
0%
Percentile
20.1
In the wild
Unconfirmed
What it is

NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write to a memory location that is outside the intended boundary of the buffer, which may lead to denial of service, Information disclosure, loss of Integrity, or possible escalation of privileges.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00286 · 20.1th percentile
Weakness
CWE-284 · Improper Access Control
Published
2022-01-18T18:05Z
EPSS history
Timeline
  • 18 JAN 18:05Z
    NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write to a memory location…
    cvelistv5