What is CVE-2021-1093?

CVE-2021-1093 is a medium-severity vulnerability in NVIDIA GPU Display Driver, classified under Improper Resource Shutdown or Release. CVSS score: 6.2/10. Published 2021-07-22.

How severe is CVE-2021-1093?

Medium severity. CVSS v3 base score is 6.2 out of 10.

Vulnerability in NVIDIA GPU Display Driver

CVE-2021-1093

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary, and may lead to denial of service or system crash.

EPSS: 0.004 (30.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.2 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Nvidia Gpu_display_driver
Nvidia Gpu Display Driver — versions All GPU Driver versions
Debian Debian_linux — versions 9.0

Weakness classification (CWE)

CWE-404 — Improper Resource Shutdown or Release

References

psirt@nvidia.com (Patch, Vendor Advisory)
psirt@nvidia.com (mailing-list, Mailing List, Third Party Advisory)
psirt@nvidia.com (vendor-advisory, Third Party Advisory)

Frequently asked questions

What is CVE-2021-1093?: CVE-2021-1093 is a medium-severity vulnerability in NVIDIA GPU Display Driver, classified under Improper Resource Shutdown or Release. CVSS score: 6.2/10. Published 2021-07-22.
How severe is CVE-2021-1093?: Medium severity. CVSS v3 base score is 6.2 out of 10.