Description
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time window timed to corrupt code execution, which may impact confidentiality, integrity, or availability. The scope impact may extend to other components.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://nvidia.custhelp.com/app/answers/detail/a_id/5263
Scores
CVSS v3
7.5
EPSS
0.0004
EPSS Percentile
12.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Details
Status
published
Products (48)
nvidia/geforce_gt_605
nvidia/geforce_gt_610
nvidia/geforce_gt_620
nvidia/geforce_gt_625
nvidia/geforce_gt_630
nvidia/geforce_gt_635
nvidia/geforce_gt_640
nvidia/geforce_gt_705
nvidia/geforce_gt_710
nvidia/geforce_gt_720
... and 38 more
Published
Nov 20, 2021
Tracked Since
Feb 18, 2026