What is CVE-2021-34402?

CVE-2021-34402 is a medium-severity vulnerability in Google Android, classified under Improper Access Control. CVSS score: 6.7/10. Published 2022-01-18.

How severe is CVE-2021-34402?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Out-of-bounds Read in Google Android

CVE-2021-34402

NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write to a memory location that is outside the intended boundary of the buffer, which may lead to denial o…

EPSS: 0.003 (20.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Google Android
Nvidia Shield_experience
Nvidia Shield Tv — versions All versions prior to SE 9.0

Weakness classification (CWE)

CWE-284 — Improper Access Control
CWE-125 — Out-of-bounds Read
CWE-787 — Out-of-bounds Write

References

psirt@nvidia.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-34402?: CVE-2021-34402 is a medium-severity vulnerability in Google Android, classified under Improper Access Control. CVSS score: 6.7/10. Published 2022-01-18.
How severe is CVE-2021-34402?: Medium severity. CVSS v3 base score is 6.7 out of 10.