CVE-2021-1120CWE-170

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a string provided by the guest OS may not be properly null…

High · published October 29, 2021

CVSS v3.1
7.0
EPSS
0%
Percentile
13.9
In the wild
Unconfirmed
What it is

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a string provided by the guest OS may not be properly null terminated. The guest OS or attacker has no ability to push content to the plugin through this vulnerability, which may lead to information disclosure, data tampering, unauthorized code execution, and denial of service.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.9th percentile
Weakness
CWE-170 · Improper Null Termination
Published
2021-10-29T19:30Z
EPSS history
Timeline
  • 29 OCT 19:30Z
    NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a string provided by the guest OS may not be properly null…
    cvelistv5