CVE-2021-1075 — NULL Pointer Dereference in Nvidia GPU Display Driver

CWE-476 — NULL Pointer DereferenceCWE-269 — Improper Privilege Management3 documents3 sources
Severity
7.3HIGHNVD
EPSS
0.0%
top 85.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Nvidia GPU Display DriverNvidia GPU Display Driver
Timeline
PublishedApr 21
Latest updateMay 24

Description

NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the program dereferences a pointer that contains a location for memory that is no longer valid, which may lead to code execution, denial of service, or escalation of privileges. Attacker does not have any control over the information and may conduct limited data modification.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:HExploitability: 2.0 | Impact: 4.7

Affected Packages2 packages

▶NVDnvidia/gpu_display_driver418 — 427.33+3

🔴Vulnerability Details

2
GHSA
GHSA-g7f5-h8hg-q4vg: NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm↗2022-05-24
▶
CVEList
CVE-2021-1075: NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm↗2021-04-21
▶
CVE-2021-1075 — NULL Pointer Dereference in Nvidia | cvebase