First published: Thu Jul 22 2021(Updated: )
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary, and may lead to denial of service or system crash.
Credit: psirt@nvidia.com
Affected Software | Affected Version | How to fix |
---|---|---|
NVIDIA GPU Display Driver Linux | >=418.197.02<418.211.00 | |
NVIDIA GPU Display Driver | >=427.33<427.48 | |
NVIDIA GPU Display Driver Linux | >=450.119.03<450.142.00 | |
NVIDIA GPU Display Driver | >=452.96<453.10 | |
NVIDIA GPU Display Driver Linux | >=460.73.01<460.91.03 | |
NVIDIA GPU Display Driver | >=462.31<462.96 | |
Debian GNU/Linux | =9.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-1093 has a severity level classified as high due to its potential to cause application crashes and denial of service.
To fix CVE-2021-1093, update to the latest version of the NVIDIA GPU Display Driver that resolves this vulnerability.
CVE-2021-1093 affects users of the NVIDIA GPU Display Driver for both Windows and Linux operating systems.
CVE-2021-1093 impacts systems running NVIDIA GPU Display Drivers across multiple versions on Windows and Linux platforms.
While CVE-2021-1093 primarily may lead to service disruption, it has the potential to indirectly contribute to data loss depending on application behavior.