Vulnerability Details : CVE-2021-1075
NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the program dereferences a pointer that contains a location for memory that is no longer valid, which may lead to code execution, denial of service, or escalation of privileges. Attacker does not have any control over the information and may conduct limited data modification.
Vulnerability category: Denial of service
Exploit prediction scoring system (EPSS) score for CVE-2021-1075
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 10 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2021-1075
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
5.6
|
MEDIUM | AV:L/AC:L/Au:N/C:N/I:P/A:C |
3.9
|
7.8
|
NIST |
|
7.3
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H |
2.0
|
4.7
|
NIST |
|
7.3
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H |
2.0
|
4.7
|
NVIDIA Corporation |
CWE ids for CVE-2021-1075
-
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.Assigned by: nvd@nist.gov (Primary)
References for CVE-2021-1075
-
https://nvidia.custhelp.com/app/answers/detail/a_id/5172
Security Bulletin: NVIDIA GPU Display Driver - April 2021 | NVIDIAVendor Advisory
Products affected by CVE-2021-1075
- cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*
- cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*
- cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*
- cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*