CVE-2019-5699

The CVE-2019-5699 issue affects NVIDIA SHIELD TV (Shield Experience) prior to v8.0.1 due to an incorrect bounds check in the NVIDIA Tegra bootloader, causing a buffer overflow that can lead to escalation of privileges and code execution (with possible information disclosure and DoS). Affected dev...

CVE-2019-5700

CVE-2019-5700 affects NVIDIA Shield TV (NVIDIA Tegra bootloader) before Shield Experience 8.0.1. The bootloader does not properly validate fields in the boot image, which may allow code execution, denial of service, privilege escalation, or information disclosure. NVIDIA and Red Hat entries corro...

CVE-2021-1108

NVIDIA Jetson/Linux kernels contain a vulnerability in FuSa Capture (VI/ISP) where an integer underflow caused by insufficient input validation may lead to denial of service, partial integrity loss, and high confidentiality impact on all processes. The issue is locally exploitable; NVIDIA referen...

CVE-2021-1107

CVE-2021-1107 affects NVIDIA Linux kernel distributions via the nvmap NVMAP_IOC_WRITE* paths, where improper access controls may allow code execution, complete denial of service, or severe integrity compromise of all system components. The issue is described across multiple connected sources (Red...

CVE-2021-1068

CVE-2021-1068 affects NVIDIA SHIELD TV (all versions prior to 8.2.2) via the NVDEC component. The vulnerability permits reading from or writing to memory outside the intended buffer boundary, potentially enabling denial of service or privilege escalation. NVIDIA’s security bulletin lists this CVE...

CVE-2021-1106

CVE-2021-1106 affects NVIDIA Jetson/Linux kernel nvmap: writes to read-only buffers may enable privilege escalation, denial of service, information disclosure, and data tampering across processes. Documented impact in multiple sources (NVIDIA Jetson and Red Hat entries) with mitigation through so...

CVE-2021-1067

NVIDIA SHIELD TV (all versions prior to 8.2.2) is affected by CVE-2021-1067 in the RPMB command status implementation, allowing an attacker to write to the Write Protect Configuration Block and potentially cause denial of service or privilege escalation. The issue is addressed by upgrading SHIELD...

CVE-2019-5682

The CVE-2019-5682 issue affects NVIDIA SHIELD TV Experience prior to 8.0, where the NVIDIA Games App improperly exports an Activity and does not restrict which apps can launch it. This root cause can enable code execution or denial of service via a locally launched action. The affected product is...

CVE-2021-1069

CVE-2021-1069 affects NVIDIA SHIELD TV prior to 8.2.2 via the NVHost kernel driver, where a null pointer in NVHost can cause a null dereference and an abnormal reboot, potentially leading to data loss. NVIDIA’s security bulletin for SHIELD TV lists this as CVSS v3.1 6.1 (AV:L/AC:L/PR:N/UI:N/S:U/C...

CVE-2019-5679

CVE-2019-5679 affects NVIDIA SHIELD TV (SHIELD Experience prior to v8.0). The vulnerability resides in the NVIDIA Tegra bootloader (nvtboot) where the Trusted OS image is not properly authenticated, potentially enabling code execution, denial of service, privilege escalation, and information disc...

CVE-2021-34406

CVE-2021-34406 concerns NVIDIA’s Tegra kernel driver (NVHost). The connected records describe a race condition in NVHost that can lead to a null pointer dereference, potentially causing a system reboot on affected devices. The risk is tied to the NVIDIA Tegra kernel driver and the NVHost componen...

CVE-2021-34401

CVE-2021-34401 affects NVIDIA Linux kernel distributions via the nvmap NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER path. The root cause is improper access control in nvmap, which can lead to code execution, and impacts confidentiality, integrity, and availability (HIGH in CVSS terms). The issue is dis...

CVE-2021-34404

The CVE-2021-34404 entry concerns NVIDIA SHIELD TV Android images (T210) with a BROM vulnerability: if access to AHB-DMA is not restricted when BROM fails, an unprivileged user with physical access could cause denial of service and compromise integrity and confidentiality beyond BROM. Severity is...

CVE-2021-34403

CVE-2021-34403 affects NVIDIA Linux kernel distributions with a vulnerability in nvmap ioctl that allows a local user to trigger a use‑after‑free, enabling code privilege escalation and impacting confidentiality, integrity, and availability. The issue is rooted in nvmap and is exploitable by a lo...

CVE-2021-34402

CVE-2021-34402 concerns the NVIDIA Tegra kernel driver, specifically the NVDEC component. The connected documents consistently describe a vulnerability where a user with high privileges may read from or write to a memory location outside the intended buffer boundary, potentially enabling denial o...

CVE-2021-34405

CVE-2021-34405 affects NVIDIA Linux distributions with a vulnerability in TrustZone’s TEE_Malloc function caused by an unchecked return value that can trigger a null pointer dereference and lead to denial of service. Exploitation details are not provided in the supplied documents. Red Hat and PTS...

CVE-2019-5681

CVE-2019-5681 affects NVIDIA SHIELD TV prior to the v8.0 release. The vulnerability resides in a custom NVIDIA API used by the mount system service, where user data could be overridden, potentially enabling code execution, denial of service, or information disclosure. Affected product: SHIELD TV ...