← Vulnerability feed

Vulnerability record · CVE-2021-34403 · published 18 January 2022

CVE-2021-34403: Nvidia shield experience use after free vulnerability

Nvidia · Shield Experience

NVIDIA Linux distributions contain a vulnerability in nvmap ioctl, which allows any user with a local account to exploit a use-after-free condition, leading to code privilege escalation, loss of confidentiality and integrity, or denial of service.

7.8 CVSS 3.1 High EPSS 0.30% · top 79.4% CWE-416 · Use after free
7.8CVSS 3.1 base score, v2 4.6
0.30%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

NVIDIA Linux distributions contain a vulnerability in nvmap ioctl, which allows any user with a local account to exploit a use-after-free condition, leading to code privilege escalation, loss of confidentiality and integrity, or denial of service.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://nvidia.custhelp.com/app/answers/detail/a_id/5259 Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5259 Vendor Advisory

Track CVE-2021-34403 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2021-34401Nvidia shield experience improper access control vulnerabilityNVIDIA Linux kernel distributions contain a vulnerability in nvmap NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER, where improper access control may lead to …EPSS 0.30%7.8CVE-2021-1107Nvidia jetson linux vulnerabilityNVIDIA Linux kernel distributions contain a vulnerability in nvmap NVMAP_IOC_WRITE* paths, where improper access controls may lead to code execution,…EPSS 0.28%7.8CVE-2021-1106Nvidia jetson linux out-of-bounds write vulnerabilityNVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in escalation …EPSS 0.26%7.8CVE-2021-1068Nvidia shield experience out-of-bounds read vulnerabilityNVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVDEC component, in which an attacker can read from or write to a memo…EPSS 0.37%7.8CVE-2019-5700Nvidia shield experience improper input validation vulnerabilityNVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra software contains a vulnerability in the bootloader, where it does not validate the fields …EPSS 0.67%7.8CVE-2019-5699Nvidia shield experience memory buffer overflow vulnerabilityNVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra bootloader contains a vulnerability where the software performs an incorrect bounds check, …EPSS 0.48%7.8CVE-2019-5681Nvidia shield experience vulnerabilityNVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the custom NVIDIA API used in the mount system service where user data could b…EPSS 0.46%7.8CVE-2019-5679Nvidia shield experience improper authentication vulnerabilityNVIDIA Shield TV Experience prior to v8.0, NVIDIA Tegra bootloader contains a vulnerability in nvtboot where the Trusted OS image is improperly authe…EPSS 0.40%

Source: NIST National Vulnerability Database (record CVE-2021-34403), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.