CVEvulnerability

CVE-2021-1060

7.1 HIGH Published 2021-01-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-01-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS 2.0 ([email protected])
3.6 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:P
Weaknesses
CWE-20

Description

NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin, in which an input index is not validated, which may lead to tampering of data or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).

Affected configurations

• nvidia virtual gpu manager (>= 8.0 < 8.6) • nvidia virtual gpu manager (>= 11.0 < 11.3)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References