CVE-2021-23217

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time window timed to corrupt code execution, which may impact confidentiality, integrity, or availability. The scope impact may extend to other components.

Score
CVSS 3.1 7.5 High
Status
Modified - psirt@nvidia.com
Published
2021-11-20
Last modified
2024-08-03

Affected products

References