PT-2021-13507 · Microsoft · Windows

Published 2021-10-27 · Updated 2021-11-04 · CVE-2021-1117

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified)

Description: The issue is related to improper input validation in the kernel mode layer handler for DxgkDdiEscape, specifically in the nvlddmkm.sys module. An attacker with local unprivileged system access and specific configuration may cause a denial of service.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

CVE-2021-1117

Affected Products

Windows

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-1117 · Security Note
• https://osv.dev/vulnerability/CVE-2021-1117 · Vendor Advisory
• https://nvidia.custhelp.com/app/answers/detail/a_id/5230 · Vendor Advisory
• https://t.me/cibsecurity/31329 · Telegram Post