CVE-2021-1091

The CVE-2021-1091 issue affects the NVIDIA GPU Display Driver for Windows. A local, unprivileged user can create a hard link that causes the driver to overwrite a file needing elevated privileges, potentially leading to data loss or denial of service. The issue is tied to the Windows driver’s han...

CVE-2021-1091

NVIDIA GPU Display driver for Windows contains a vulnerability where an unprivileged user can create a file hard link that causes the driver to overwrite a file that requires elevated privilege to modify, which could lead to data loss or denial of service...

CVE-2021-1089

CVE-2021-1089 affects NVIDIA GPU Display Driver for Windows, with a vulnerability in nvidia-smi that allows an uncontrolled DLL loading path, potentially enabling local arbitrary code execution, denial of service, information disclosure, or data tampering. NVIDIA’s security bulletin lists Windows...

CVE-2021-1089

NVIDIA GPU Display Driver for Windows contains a vulnerability in nvidia-smi where an uncontrolled DLL loading path may lead to arbitrary code execution, denial of service, information disclosure, and data tampering...

Vulnerabilities fixed in NVIDIA GPU Display Driver

Vulnerabilities have been fixed in NVIDIA GPU Display Driver. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Manipulation of data Access to system data Increased user privileges NVIDIA has...

CVE-2021-1090

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for control calls where the software reads or writes to a buffer by using an index or pointer that references a memory location after the end of the buffer, which may lead to dat...

CVE-2021-1090

CVE-2021-1090 affects the NVIDIA GPU Display Driver for Windows and Linux, specifically the kernel-mode nvlddmkm.sys handler for control calls. The vulnerability arises when the driver reads or writes to a buffer using an index or pointer that references memory after the buffer end, enabling data...

CVE-2021-1095

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handlers for all control calls with embedded parameters where dereferencing an untrusted pointer may lead to denial of service...

CVE-2021-1093

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary, and may lead to denial of...

CVE-2021-1094

CVE-2021-1094 affects the NVIDIA GPU Display Driver for Windows and Linux, with a vulnerability in the kernel-mode layer (nvlddmkm.sys) handling of DxgkDdiEscape. An out-of-bounds array access may enable denial of service or information disclosure. Publicly documented mitigations include vendor/O...

CVE-2021-1093

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary, and may lead to denial of...

CVE-2021-1095

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handlers for all control calls with embedded parameters where dereferencing an untrusted pointer may lead to denial of service...

Security Bulletin: NVIDIA DGX-1 and NVIDIA DGX-2 Systems - July 2021

NVIDIA has released a firmware security update for NVIDIA DGX-1™ and NVIDIA DGX-2™systems. This update addresses an issue that may lead to denial of service, code execution, and data tampering. To protect your system, download and install this firmware update through the NVIDIA Enterprise Support...

CVE-2021-1093

CVE-2021-1093 affects the NVIDIA GPU Display Driver for Windows and Linux. The vulnerability stems from a firmware assert()‑like check in the driver, which can be triggered by a local attacker and may cause an application exit, denial of service, or system crash. Connected advisories confirm mult...

CVE-2021-1095

CVE-2021-1095 affects NVIDIA GPU Display Driver for Windows and Linux. Root cause: kernel‑mode layer nvlddmkm.sys handlers for control calls with embedded parameters may dereference an untrusted pointer, leading to Denial of Service. Impact: local attacker can crash or disrupt the system. Remedia...

CVE-2021-1094

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where an out of bounds array access may lead to denial of service or information disclosure...

CVE-2021-1094

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where an out of bounds array access may lead to denial of service or information disclosure...

CVE-2021-1103

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 12.x prior to 12.3, version 11.x prior to 11.5 and version 8.x prior 8.8...

CVE-2021-1099

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin that could allow an attacker to cause stack-based buffer overflow and put a customized ROP gadget on the stack. Such an attack may lead to information disclosure, data tampering, or denial of service. This affect...

CVE-2021-1103

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 12.x prior to 12.3, version 11.x prior to 11.5 and version 8.x prior 8.8...