VULNERABILITY INTELLIGENCE
CVE-2021-1083
CVSS score7.8 HIGH
EPSS probability0.25%
CISA KEVNot currently listed
Published2021-04-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager (vGPU plugin), in which an input length is not validated, which may lead to information disclosure, tampering of data, or denial of service. This affects vGPU version 12.x (prior to 12.2) and version 11.x (prior to 11.4).
Weakness classification
- nvd@nist.gov: CWE-1284
Primary references
- psirt@nvidia.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory