CVE-2021-1075

Published: Apr 21, 2021Modified: Jun 17, 2026

7.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H

Exploitability: 2.0 / Impact: 4.7

Source: NVD

Description

NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the program dereferences a pointer that contains a location for memory that is no longer valid, which may lead to code execution, denial of service, or escalation of privileges. Attacker does not have any control over the information and may conduct limited data modification.

Affected (4)

Products: Nvidia: Gpu Display Driver

Nvidia

1 product

Gpu Display Driver

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Nvidia Gpu Display Driver	418 ≤ version < 427.33
Nvidia Gpu Display Driver	450 ≤ version < 452.96
Nvidia Gpu Display Driver	460 ≤ version < 462.31
Nvidia Gpu Display Driver	465 ≤ version < 466.11

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

https://nvidia.custhelp.com/app/answers/detail/a_id/5172

Source: psirt@nvidia.com

Vendor Advisory

https://nvidia.custhelp.com/app/answers/detail/a_id/5172

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.