PT-2021-13450 · Nvidia · Nvidia Gpu Display Driver

Published 2021-01-08 · Updated 2021-01-14 · CVE-2021-1054

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Windows, all versions

Description The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action, which may lead to denial of service. This issue is related to the kernel mode layer handler for DxgkDdiEscape in the nvlddmkm.sys file.

Recommendations As a temporary workaround, consider restricting access to the DxgkDdiEscape handler in the kernel mode layer until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2021-1054

Affected Products

Nvidia Gpu Display Driver

References · 5

• https://osv.dev/vulnerability/CVE-2021-1054 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1054 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5142 · Vendor Advisory
• https://t.me/cvenotify/8314 · Telegram Post
• https://t.me/cibsecurity/21804 · Telegram Post