CVE-2021-1051: 
NVIDIA Graphics Driver vulnerability analysis and mitigation

NVIDIA GPU Display Driver for Windows contains a vulnerability (CVE-2021-1051) in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape. The vulnerability was disclosed on January 7, 2021, affecting NVIDIA GPU Display Driver versions prior to 461.09 for Windows systems. This vulnerability received a CVSS v3.1 base score of 8.4, indicating high severity (NVIDIA Security).

The vulnerability exists in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a local user can gain elevated privileges to modify display configuration data. The vulnerability has a CVSS vector of AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H, indicating local access requirements with low attack complexity and no user interaction needed (NVIDIA Security).

If exploited, this vulnerability can result in denial of service of the display through unauthorized modification of display configuration data. The high severity score reflects the potential for significant system impact, particularly concerning the integrity and availability of the display system (NVIDIA Security).

The vulnerability requires local access with low attack complexity. No user interaction is needed for exploitation, making it relatively straightforward for an attacker with local system access to exploit. The vulnerability affects multiple NVIDIA product lines including GeForce, NVIDIA RTX/Quadro, NVS, and Tesla running on Windows systems (NVIDIA Security).

NVIDIA has released security updates to address this vulnerability. For Windows systems, users should upgrade to driver version 461.09 or later for R460 branch, 452.77 or later for R450 branch, and 392.63 or later for R390 branch. The updates are available through the NVIDIA Driver Downloads page (NVIDIA Security).