CVE-2021-1103

Published: Jul 21, 2021Modified: Jun 17, 2026

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 12.x (prior to 12.3), version 11.x (prior to 11.5) and version 8.x (prior 8.8).

Affected (3)

Products: Nvidia: Virtual Gpu

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Nvidia Virtual Gpu	From 11.0 to 11.5
Nvidia Virtual Gpu	From 12.0 to 12.3
Nvidia Virtual Gpu	From 8.0 to 8.8

Related CWEs

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

https://nvidia.custhelp.com/app/answers/detail/a_id/5211

Source: psirt@nvidia.com

PatchThird Party Advisory

https://nvidia.custhelp.com/app/answers/detail/a_id/5211

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.