Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-1093

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary, and may lead to denial of service or system crash.

Published

2021-07-22T05:15:07.937

Last Modified

2024-11-21T05:43:35.013

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.2 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-404
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application nvidia gpu_display_driver < 418.211.00 Yes
Application nvidia gpu_display_driver < 427.48 Yes
Application nvidia gpu_display_driver < 450.142.00 Yes
Application nvidia gpu_display_driver < 453.10 Yes
Application nvidia gpu_display_driver < 460.91.03 Yes
Application nvidia gpu_display_driver < 462.96 Yes
Operating System debian debian_linux 9.0 Yes
References