PT-2021-13464 · Nvidia · Nvidia Shield Tv

Published 2021-01-20 · Updated 2021-01-28 · CVE-2021-1068

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA SHIELD TV versions prior to 8.2.2

Description The issue is related to a vulnerability in the NVDEC component, where an attacker can read from or write to a memory location outside the intended boundary of the buffer. This may lead to denial of service or escalation of privileges.

Recommendations For versions prior to 8.2.2, update to version 8.2.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the NVDEC component until a patch is available.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2021-1068

Affected Products

Nvidia Shield Tv

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-1068 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5148 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-1068 · Vendor Advisory
• https://t.me/cibsecurity/22478 · Telegram Post
• https://t.me/cvenotify/8805 · Telegram Post