CVE-2021-1090: NVIDIA GPU Display Driver

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for control calls where the software reads or writes to a buffer by using an index or pointer that references a memory location after the end of the buffer, which may lead to data tampering or denial of service.

Affected products

• NVIDIA GPU Display Driver: from 427.33, before 427.48 (fixed in 427.48); from 452.96, before 453.10 (fixed in 453.10); from 462.31, before 462.96 (fixed in 462.96)

Published 2021-07-22. Last modified 2026-06-17.