CVE-2021-1089 — Uncontrolled Search Path Element in Nvidia GPU Display Driver

CWE-427 — Uncontrolled Search Path Element3 documents3 sources

Severity

7.8HIGHNVD

EPSS

0.1%

top 68.50%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Nvidia GPU Display Driver Nvidia GPU Display Driver

Timeline

PublishedJul 22

Latest updateMay 24

Description

NVIDIA GPU Display Driver for Windows contains a vulnerability in nvidia-smi where an uncontrolled DLL loading path may lead to arbitrary code execution, denial of service, information disclosure, and data tampering.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDnvidia/gpu_display_driver427.33 — 427.48+2

▶CVEListV5nvidia/nvidia_gpu_display_driverAll GPU Driver versions

🔴Vulnerability Details

GHSA

GHSA-8hvj-85pf-254m: NVIDIA GPU Display Driver for Windows contains a vulnerability in nvidia-smi where an uncontrolled DLL loading path may lead to arbitrary code executi↗2022-05-24

▶

CVEList

CVE-2021-1089: NVIDIA GPU Display Driver for Windows contains a vulnerability in nvidia-smi where an uncontrolled DLL loading path may lead to arbitrary code executi↗2021-07-22

▶