CVE-2021-23201

Summary

NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevated privileges to generate valid microcode by identifying, exploiting, and loading vulnerable microcode. Such an attack could lead to information disclosure, data corruption, or denial of service of the device. The scope may extend to other components.

Affected Software

VendorProductVersion RangeStatus
NVIDIANVIDIA GPU and Tegra hardwareTuring, Volta, Pascal, Maxwell, Tegra X1, Tegra X1+, Tegra TX2, Xavieraffected

Weaknesses

  • CWE 1240: Use of a Risky Cryptographic Primitive

ADP Enrichment

CVE Program Container

Additional References

References