Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

TI-2017-04128 CVE-2017-6296 · GHSA-56m8-vjv3-958w

Race condition in NVIDIA SHIELD TV

Priority LOW 30

NVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or possible escalation of privileges.

CVSS 3.0HIGH 7.0 Local Low privileges No interaction EPSS 0.00098 Published 2018-03-06 No fix listed CWE-362
TI-2017-04127 CVE-2017-6295 · GHSA-prhf-74x9-2hj2

Out-of-bounds read in NVIDIA SHIELD TV

Priority LOW 35

NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or informa…

CVSS 3.0HIGH 8.4 Local Low privileges No interaction EPSS 0.00135 Published 2018-03-06 No fix listed CWE-125
TI-2017-04117 CVE-2017-6284 · GHSA-89wc-rcqc-7g26

Information disclosure in NVIDIA SHIELD TV

Priority LOW 23

NVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG) where the DRBG does not properly initialize and store or transmits sensitive data using a weakened encryption scheme that i…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00075 Published 2018-03-06 No fix listed CWE-200
TI-2017-04116 CVE-2017-6283 · GHSA-qhvw-9rr9-5p73

Information disclosure in NVIDIA SHIELD TV

Priority LOW 24

NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to information disclosure.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00153 Published 2018-03-06 No fix listed CWE-200
Priority LOW 34

Integer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5 allows local users to cause a denial of service (system…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00422 Published 2017-04-24 No fix listed CWE-190