CVEvulnerability
CVE-2021-1075
7.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-04-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.3 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
- CVSS 3.1 ([email protected])
- 7.3 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
- CVSS 2.0 ([email protected])
- 5.6 MEDIUM — AV:L/AC:L/Au:N/C:N/I:P/A:C
- Weaknesses
- CWE-476
Description
NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the program dereferences a pointer that contains a location for memory that is no longer valid, which may lead to code execution, denial of service, or escalation of privileges. Attacker does not have any control over the information and may conduct limited data modification.
Affected configurations
• nvidia gpu display driver (>= 418 < 427.33)
• nvidia gpu display driver (>= 450 < 452.96)
• nvidia gpu display driver (>= 460 < 462.31)
• nvidia gpu display driver (>= 465 < 466.11)
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5172 Vendor Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5172 Vendor Advisory