Read the docs

NVIDIA

Records1248All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical86CVSS 9.0–10.0
CVSS high785CVSS 7.0–8.9

Exploited now

NVIDIA records in CISA KEV

No NVIDIA vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

8 records in Shield Tv Firmware · all components

TI-2017-04127 CVE-2017-6295 · GHSA-prhf-74x9-2hj2

Out-of-bounds read in NVIDIA SHIELD TV

Priority LOW 35

NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or informa…

CVSS 3.0HIGH 8.4 Local Low privileges No interaction EPSS 0.00135 Published 2018-03-06 No fix listed CWE-125
Priority LOW 34

Integer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5 allows local users to cause a denial of service (system…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00422 Published 2017-04-24 No fix listed CWE-190
TI-2017-04128 CVE-2017-6296 · GHSA-56m8-vjv3-958w

Race condition in NVIDIA SHIELD TV

Priority LOW 30

NVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or possible escalation of privileges.

CVSS 3.0HIGH 7.0 Local Low privileges No interaction EPSS 0.00098 Published 2018-03-06 No fix listed CWE-362
TI-2017-04116 CVE-2017-6283 · GHSA-qhvw-9rr9-5p73

Information disclosure in NVIDIA SHIELD TV

Priority LOW 24

NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to information disclosure.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00153 Published 2018-03-06 No fix listed CWE-200
TI-2017-04117 CVE-2017-6284 · GHSA-89wc-rcqc-7g26

Information disclosure in NVIDIA SHIELD TV

Priority LOW 23

NVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG) where the DRBG does not properly initialize and store or transmits sensitive data using a weakened encryption scheme that i…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00075 Published 2018-03-06 No fix listed CWE-200
Open these records in search →