CVEvulnerability

CVE-2021-1063

7.8 HIGH Published 2021-01-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-01-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-125

Description

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input offset is not validated, which may lead to a buffer overread, which in turn may cause tampering of data, information disclosure, or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).

Affected configurations

• nvidia virtual gpu manager (>= 8.0 < 8.6) • nvidia virtual gpu manager (>= 11.0 < 11.3)

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References