CVE-2021-1119: NVIDIA Virtual GPU

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can double-free a pointer, which may lead to denial of service. This flaw may result in a write-what-where condition, allowing an attacker to execute arbitrary code impacting integrity and availability.

Affected products

• NVIDIA Virtual GPU: from 8.0, before 8.9 (fixed in 8.9); from 11.0, before 11.6 (fixed in 11.6); from 12.0, before 12.4 (fixed in 12.4); from 13.0, before 13.1 (fixed in 13.1)

Published 2021-10-29. Last modified 2026-06-17.