CVE-2021-1091

The CVE-2021-1091 issue affects the NVIDIA GPU Display Driver for Windows. A local, unprivileged user can create a hard link that causes the driver to overwrite a file needing elevated privileges, potentially leading to data loss or denial of service. The issue is tied to the Windows driver’s han...

CVE-2021-1089

CVE-2021-1089 affects NVIDIA GPU Display Driver for Windows, with a vulnerability in nvidia-smi that allows an uncontrolled DLL loading path, potentially enabling local arbitrary code execution, denial of service, information disclosure, or data tampering. NVIDIA’s security bulletin lists Windows...

CVE-2021-1095

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handlers for all control calls with embedded parameters where dereferencing an untrusted pointer may lead to denial of service...

CVE-2021-1090

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for control calls where the software reads or writes to a buffer by using an index or pointer that references a memory location after the end of the buffer, which may lead to dat...

CVE-2021-1093: Improper Resource Shutdown or Release

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary, and may lead to denial of...

PT-2021-13486

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver for Windows affected versions not specified Description The NVIDIA Windows GPU Display Driver for Windows contains a vulnerability in the NVIDIA kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape. This...

PT-2021-13485

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Windows affected versions not specified Description The issue is related to an uncontrolled DLL loading path in the nvidia-smi component, which may lead to arbitrary code execution, denial of service, information...

CVE-2021-1089: Uncontrolled Search Path Element

NVIDIA GPU Display Driver for Windows contains a vulnerability in nvidia-smi where an uncontrolled DLL loading path may lead to arbitrary code execution, denial of service, information disclosure, and data tampering...

CVE-2021-1094: Out-of-bounds Read

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where an out of bounds array access may lead to denial of service or information disclosure...

CVE-2021-1094

CVE-2021-1094 affects the NVIDIA GPU Display Driver for Windows and Linux, with a vulnerability in the kernel-mode layer (nvlddmkm.sys) handling of DxgkDdiEscape. An out-of-bounds array access may enable denial of service or information disclosure. Publicly documented mitigations include vendor/O...

CVE-2021-1095

CVE-2021-1095 affects NVIDIA GPU Display Driver for Windows and Linux. Root cause: kernel‑mode layer nvlddmkm.sys handlers for control calls with embedded parameters may dereference an untrusted pointer, leading to Denial of Service. Impact: local attacker can crash or disrupt the system. Remedia...

CVE-2021-1093

CVE-2021-1093 affects the NVIDIA GPU Display Driver for Windows and Linux. The vulnerability stems from a firmware assert()‑like check in the driver, which can be triggered by a local attacker and may cause an application exit, denial of service, or system crash. Connected advisories confirm mult...

CVE-2021-1095: NULL Pointer Dereference

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handlers for all control calls with embedded parameters where dereferencing an untrusted pointer may lead to denial of service...

CVE-2021-1092: Improper Link Resolution Before File Access

NVIDIA GPU Display Driver for Windows contains a vulnerability in the NVIDIA Control Panel application where it is susceptible to a Windows file system symbolic link attack where an unprivileged attacker can cause the applications to overwrite privileged files, resulting in potential denial of...

CVE-2021-1096: NULL Pointer Dereference

NVIDIA Windows GPU Display Driver for Windows contains a vulnerability in the NVIDIA kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where dereferencing a NULL pointer may lead to a system crash...

CVE-2021-1091: Improper Link Resolution Before File Access

NVIDIA GPU Display driver for Windows contains a vulnerability where an unprivileged user can create a file hard link that causes the driver to overwrite a file that requires elevated privilege to modify, which could lead to data loss or denial of service...

CVE-2021-1090: Buffer Copy without Checking Size of Input

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for control calls where the software reads or writes to a buffer by using an index or pointer that references a memory location after the end of the buffer, which may lead to dat...

CVE-2021-1094

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where an out of bounds array access may lead to denial of service or information disclosure...

CVE-2021-1095

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handlers for all control calls with embedded parameters where dereferencing an untrusted pointer may lead to denial of service...

CVE-2021-1090

CVE-2021-1090 affects the NVIDIA GPU Display Driver for Windows and Linux, specifically the kernel-mode nvlddmkm.sys handler for control calls. The vulnerability arises when the driver reads or writes to a buffer using an index or pointer that references memory after the buffer end, enabling data...