cvelist/2021/1xxx/CVE-2021-1075.json

{
	"CVE_data_meta" : {
		"ASSIGNER" : "psirt@nvidia.com",
		"ID" : "CVE-2021-1075",
		"STATE" : "PUBLIC"
	},
	"affects" : {
		"vendor" : {
			"vendor_data" : [
				{
					"product" : {
						"product_data" : [
							{
								"product_name" : "NVIDIA GPU Display Driver",
								"version" : {
									"version_data" : [
										{
											"version_value" : "All"
										}
									]
								}
							}
						]
					},
					"vendor_name" : "NVIDIA"
				}
			]
		}
	},
	"data_format" : "MITRE",
	"data_type" : "CVE",
	"data_version" : "4.0",
	"description" : {
		"description_data" : [
			{
				"lang" : "eng",
				"value" : "NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the program dereferences a pointer that contains a location for memory that is no longer valid, which may lead to code execution, denial of service, or escalation of privileges."
			}
		]
	},
	"generator" : {
		"engine" : "Vulnogram 0.0.9"
	},
	"impact" : {
		"cvss" : {
			"attackComplexity" : "LOW",
			"attackVector" : "LOCAL",
			"availabilityImpact" : "HIGH",
			"baseScore" : 7.3,
			"baseSeverity" : "HIGH",
			"confidentialityImpact" : "NONE",
			"integrityImpact" : "LOW",
			"privilegesRequired" : "LOW",
			"scope" : "CHANGED",
			"userInteraction" : "NONE",
			"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H",
			"version" : "3.1"
		}
	},
	"problemtype" : {
		"problemtype_data" : [
			{
				"description" : [
					{
						"lang" : "eng",
						"value" : "code exectution, denial of service, escalation of privileges"
					}
				]
			}
		]
	},
	"references" : {
		"reference_data" : [
			{
				"name" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
				"refsource" : "CONFIRM",
				"url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172"
			}
		]
	},
	"source" : {
		"discovery" : "UNKNOWN"
	}
}