5.5

CVE-2021-1095

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handlers for all control calls with embedded parameters where dereferencing an untrusted pointer may lead to denial of service.

Data is provided by the National Vulnerability Database (NVD)
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 418.197.02 < 418.211.00
Nvidia ≫ Gpu Display Driver SwPlatformwindows Version >= 427.33 < 427.48
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 450.119.03 < 450.142.00
Nvidia ≫ Gpu Display Driver SwPlatformwindows Version >= 452.96 < 453.10
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 460.73.01 < 460.91.03
Nvidia ≫ Gpu Display Driver SwPlatformwindows Version >= 462.31 < 462.96
Debian ≫ Debian Linux Version9.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.19% 0.409
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
psirt@nvidia.com 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.