CVE-2021-1117

Published: Oct 27, 2021Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an attacker through specific configuration and with local unprivileged system access may cause improper input validation, which may lead to denial of service.

Affected (4)

Products: Nvidia: Gpu Display Driver

Nvidia

1 product

Gpu Display Driver

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Nvidia Gpu Display Driver	From 390 to 392.68
Nvidia Gpu Display Driver	From 460 to 463.15
Nvidia Gpu Display Driver	From 470 to 472.39
Nvidia Gpu Display Driver	From 495 to 496.49

Related CWEs

CWE-129

Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

References (2)

https://nvidia.custhelp.com/app/answers/detail/a_id/5230

Source: psirt@nvidia.com

Vendor Advisory

https://nvidia.custhelp.com/app/answers/detail/a_id/5230

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.