What is CVE-2021-1117?

CVE-2021-1117 is a medium-severity vulnerability in NVIDIA GPU Display Driver, classified under Improper Validation of Array Index. CVSS score: 4.7/10. Published 2021-10-27.

How severe is CVE-2021-1117?

Medium severity. CVSS v3 base score is 4.7 out of 10.

Vulnerability in NVIDIA GPU Display Driver

CVE-2021-1117

Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an attacker through specific configuration and with local unprivileged system access may cause improper input validation, which may lead to denial of service.

EPSS: 0.002 (8.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Nvidia Gpu_display_driver
Nvidia Gpu Display Driver — versions All GPU Driver versions

Weakness classification (CWE)

CWE-129 — Improper Validation of Array Index

References

psirt@nvidia.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-1117?: CVE-2021-1117 is a medium-severity vulnerability in NVIDIA GPU Display Driver, classified under Improper Validation of Array Index. CVSS score: 4.7/10. Published 2021-10-27.
How severe is CVE-2021-1117?: Medium severity. CVSS v3 base score is 4.7 out of 10.