CVEvulnerability
CVE-2021-1117
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-10-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-129
Description
Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an attacker through specific configuration and with local unprivileged system access may cause improper input validation, which may lead to denial of service.
Affected configurations
• nvidia gpu display driver (>= 390 < 392.68)
• nvidia gpu display driver (>= 460 < 463.15)
• nvidia gpu display driver (>= 470 < 472.39)
• nvidia gpu display driver (>= 495 < 496.49)
Related
Weakness · CWE (1)
- CWE-129 Improper Validation of Array Index weakness
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5230 Vendor Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5230 Vendor Advisory