CVE-2021-23217

published 2021-11-20

CVE-2021-23217: NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA…

Priority P3 36 high 7.5 CVSS 3.1

AV L AC H PR H UI N S C C H I H A H

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time window timed to corrupt code execution, which may impact confidentiality, integrity, or availability. The scope impact may extend to other components.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
nvidia	nvidia_gpu_and_tegra_hardware	—	—

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

nvd v2.0 6.9 MEDIUM AV:L/AC:M/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.