CVE-2021-1089

Published: Jul 22, 2021Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

NVIDIA GPU Display Driver for Windows contains a vulnerability in nvidia-smi where an uncontrolled DLL loading path may lead to arbitrary code execution, denial of service, information disclosure, and data tampering.

Affected (3)

Products: Nvidia: Gpu Display Driver

Nvidia

1 product

Gpu Display Driver

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Nvidia Gpu Display Driver	From 427.33 to 427.48
Nvidia Gpu Display Driver	From 452.96 to 453.10
Nvidia Gpu Display Driver	From 462.31 to 462.96

Related CWEs

CWE-427

Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (2)

https://nvidia.custhelp.com/app/answers/detail/a_id/5211

Source: psirt@nvidia.com

ProductVendor Advisory

https://nvidia.custhelp.com/app/answers/detail/a_id/5211

Source: af854a3a-2127-422b-91ae-364da2661108

ProductVendor Advisory

Timeline

No history available yet.