CVE-2021-1054: 
NVIDIA Graphics Driver vulnerability analysis and mitigation

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the software incorrectly performs authorization checks when an actor attempts to access a resource or perform an action. This vulnerability was disclosed on January 7, 2021, and affects Windows GPU Display Driver versions prior to 461.09 (NVIDIA Bulletin).

The vulnerability has been assigned a CVSS v3.1 base score of 6.5 with vector AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H. The issue exists in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, specifically related to improper authorization checks (NVIDIA Bulletin).

When exploited, this vulnerability may lead to denial of service on affected systems. The vulnerability requires local access and low privileges to exploit (NVIDIA Bulletin).

The vulnerability requires local access with low privileges to exploit. No evidence of active exploitation in the wild has been reported (NVIDIA Bulletin).

NVIDIA has released security updates to address this vulnerability. Users should update to NVIDIA GPU Display Driver version 461.09 for R460 branch on Windows. For users of NVIDIA vGPU software, updates to version 11.3 (driver version 452.77) for Windows are available (NVIDIA Bulletin).