CVE-2021-1090

Katalog CVE

CVSS 7.1 · High EPSS 0,29%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada nvidia gpu display driver. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for control calls where the software reads or writes to a buffer by using an index or pointer that references a memory location after the end of the buffer, which may lead to data tampering or denial of service.

Rincian

Terbit di NVD

22 Juli 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,29% peluang dieksploitasi; lebih tinggi dari 19,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://nvidia.custhelp.com/app/answers/detail/a_id/5211 patch · advisory vendor
• https://security.gentoo.org/glsa/202310-02 advisory pihak ketiga