CVE-2021-34400

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to gain access to information from unscrubbed memory, which may lead to information disclosure.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Nov 20, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-344017.8NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER, where improper access control may CVE-2021-344026.7NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write t CVE-2021-344037.8NVIDIA Linux distributions contain a vulnerability in nvmap ioctl, which allows any user with a local account to exploit a use-after-free co CVE-2021-344047.6Android images for T210 provided by NVIDIA contain a vulnerability in BROM, where failure to limit access to AHB-DMA when BROM fails may all CVE-2021-344055.5NVIDIA Linux distributions contain a vulnerability in TrustZone’s TEE_Malloc function, where an unchecked return value causing a null pointe CVE-2021-344064.7NVIDIA Tegra kernel driver contains a vulnerability in NVHost, where a specific race condition can lead to a null pointer dereference, which CVE-2021-344087.8The Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to a user writable directory as a privileged CVE-2021-344097.8It was discovered that the installation packages of the Zoom Client for Meetings for MacOS (Standard and for IT Admin) installation before v CVE-2021-34414.8A potential security vulnerability has been identified for the HP OfficeJet 7110 Wide Format ePrinter that enables Cross-Site Scripting (XSS CVE-2021-344107.8A user-writable application bundle unpacked during the install for all versions of the Zoom Plugin for Microsoft Outlook for Mac before 5.0.CVE-2021-344117.8During the installation process forZoom Rooms for Conference Room for Windows before version 5.3.0 it is possible to launch Internet Explore CVE-2021-344127.8During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possible to launch Internet