NVIDIA Warns of Severe Security Vulnerabilities
NJCCIC Advisory
Original Release Date: 4/29/2021
Summary
NVIDIA disclosed five vulnerabilities, including two high severity vulnerabilities CVE-2021-1074 and CVE-2021-1075, for the NVIDIA GPU Display Driver. Exploitation of these vulnerabilities could lead to code execution, denial of service, escalation of privileges, and information disclosure. The NVIDIA virtual GPU (vGPU) also has eight vulnerabilities that could lead to similar attacks. NVIDIA released a software security update to address all of the vulnerabilities.
Recommendations
The NJCCIC strongly recommends NVIDIA users apply updates found in the NVIDIA April 2021 Security Bulletin immediately after appropriate testing.
The NJCCIC is a component organization within the New Jersey Office of Homeland Security and Preparedness. We are the State's one-stop-shop for cyber threat analysis, incident reporting, and information sharing and are committed to making New Jersey more resilient to cyber threats by spreading awareness and promoting the adoption of best practices.
View our Privacy Policy here.
View our Site Index here.