CVE-2021-1094: Medium severity nvidia gpu display driver vulnerability
Published Jul 22, 2021
·Updated
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where an out of bounds array access may lead to denial of service or information disclosure.
Affected Software
7 affected components
Nvidia Gpu Display Driver Linux>=418.197.02<418.211.00
Nvidia Gpu Display Driver Windows>=427.33<427.48
Nvidia Gpu Display Driver Linux>=450.119.03<450.142.00
Nvidia Gpu Display Driver Windows>=452.96<453.10
Nvidia Gpu Display Driver Linux>=460.73.01<460.91.03
Nvidia Gpu Display Driver Windows>=462.31<462.96
Debian Debian Linux=9.0
Remediation
Patch Available
Event History
Jul 22, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-1094?
CVE-2021-1094 is a vulnerability in the NVIDIA GPU Display Driver for Windows and Linux that allows for denial of service or information disclosure.
2
What software is affected by CVE-2021-1094?
The NVIDIA GPU Display Driver for Windows and Linux is affected by CVE-2021-1094.
3
What is the severity of CVE-2021-1094?
CVE-2021-1094 has a severity level of medium.
4
How can CVE-2021-1094 be exploited?
CVE-2021-1094 can be exploited by performing an out of bounds array access in the kernel mode layer handler for DxgkDdiEscape.
5
How can I fix CVE-2021-1094?
To fix CVE-2021-1094, users should update their NVIDIA GPU Display Driver to the latest version available.