CVE-2021-1096

NVIDIA Windows GPU Display Driver for Windows contains a vulnerability in the NVIDIA kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where dereferencing a NULL pointer may lead to a system crash.

CVSS v3 5.5 MEDIUM
CVSS v2.0 4.9 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

4.9^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 3.9 / Impact : 6.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5211	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:nvidia:gpu_display_driver::::::windows::*
	cpe:2.3:a:nvidia:gpu_display_driver::::::windows::*
	cpe:2.3:a:nvidia:gpu_display_driver::::::windows::*

History

30 Jul 2021, 17:50

Type	Values Removed	Values Added
CWE		CWE-476
CPE		cpe:2.3:a:nvidia:gpu_display_driver::::::windows::*
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : 4.9 v3 : 5.5
References	~~(CONFIRM) https://nvidia.custhelp.com/app/answers/detail/a_id/5211 -~~	(CONFIRM) https://nvidia.custhelp.com/app/answers/detail/a_id/5211 - Patch, Vendor Advisory

22 Jul 2021, 05:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2021-07-22 05:15

Updated : 2023-12-10 13:55

NVD link : CVE-2021-1096

Mitre link : CVE-2021-1096

CVE.ORG link : CVE-2021-1096

JSON object : View

Products Affected

nvidia

gpu_display_driver

CWE

CWE-476

NULL Pointer Dereference

{"id": "CVE-2021-1096", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "psirt@nvidia.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2021-07-22T05:15:08.200", "references": [{"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5211", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@nvidia.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-476"}]}], "descriptions": [{"lang": "en", "value": "NVIDIA Windows GPU Display Driver for Windows contains a vulnerability in the NVIDIA kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where dereferencing a NULL pointer may lead to a system crash."}, {"lang": "es", "value": "Un controlador de pantalla de la GPU de NVIDIA para Windows contiene una vulnerabilidad en el manejador de la capa de modo del kernel de NVIDIA (nvlddmkm.sys) para DxgkDdiEscape, donde una desreferenciaci\u00f3n de puntero NULL puede conllevar a un bloqueo del sistema"}], "lastModified": "2021-07-30T17:50:29.310", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "A5A345DF-457A-4B7E-A4E9-4D29FB4C9722", "versionEndExcluding": "427.48", "versionStartIncluding": "427.33"}, {"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "650D9B87-1AFB-4462-A8D5-E993D8ECDACA", "versionEndExcluding": "453.10", "versionStartIncluding": "452.96"}, {"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "018F843B-EFA3-4E49-A269-168221A205CA", "versionEndExcluding": "462.96", "versionStartIncluding": "462.31"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@nvidia.com"}