NVIDIA Shield Tv Firmware vulnerabilities

8 CVEs affecting NVIDIA Shield Tv Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-6296, published 2018-03-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-6917, published 2017-04-24. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5.
CVE-2016-6915, published 2017-04-24. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Stack-based buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5.
CVE-2016-6916, published 2017-04-24. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Integer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5 allows local users to cause a…
CVE-2017-6283, published 2018-03-06. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to information disclosure. This issue is…
CVE-2017-6282, published 2018-03-06. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary value to an arbitrary location which may lead to an escalation of privileges. This…
CVE-2017-6295, published 2018-03-06. High severity, CVSS 8.4. EPSS: 0.1% chance of exploitation in the next 30 days. NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial…
CVE-2017-6296, published 2018-03-06. High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days. NVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or possible escalation of privileges. This issue is rated as moderate.
CVE-2017-6284, published 2018-03-06. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. NVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG) where the DRBG does not properly initialize and store or transmits sensitive data using a weakened…