What is CVE-2021-1075?

CVE-2021-1075 is a high-severity vulnerability in NVIDIA GPU Display Driver, classified under NULL Pointer Dereference. CVSS score: 7.3/10. Published 2021-04-21.

How severe is CVE-2021-1075?

High severity. CVSS v3 base score is 7.3 out of 10.

Is CVE-2021-1075 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

NULL pointer dereference in NVIDIA GPU Display Driver

CVE-2021-1075

NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the program dereferences a pointer that contains a location for memory that is no longer valid, which may lead to code execution, denial of service, or escalation of privileges. Attacker does not have any control over the information and may conduct limited data modification.

EPSS: 0.002 (16.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H.

Affected products

Nvidia Gpu_display_driver
Nvidia Gpu Display Driver — versions All

Weakness classification (CWE)

CWE-476 — NULL Pointer Dereference

Public proof-of-concept exploits

n0-traces/cve_

References

psirt@nvidia.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-1075?: CVE-2021-1075 is a high-severity vulnerability in NVIDIA GPU Display Driver, classified under NULL Pointer Dereference. CVSS score: 7.3/10. Published 2021-04-21.
How severe is CVE-2021-1075?: High severity. CVSS v3 base score is 7.3 out of 10.
Is CVE-2021-1075 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.