CVE-2021-1089: 
NVIDIA Graphics Driver vulnerability analysis and mitigation

NVIDIA GPU Display Driver for Windows contains a vulnerability in nvidia-smi (CVE-2021-1089) discovered in July 2021. The vulnerability involves an uncontrolled DLL loading path that could lead to multiple security issues. This vulnerability affects various NVIDIA GPU Display Driver versions across different product lines including GeForce, NVIDIA RTX/Quadro, NVS, and Tesla running on Windows operating systems (NVIDIA Bulletin).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating a high severity issue. The technical nature of the vulnerability involves an uncontrolled DLL loading path in the nvidia-smi component, which could be exploited locally with low attack complexity and requires low privileges (NVD).

The exploitation of this vulnerability can lead to multiple severe consequences including arbitrary code execution, denial of service, information disclosure, and data tampering. The vulnerability affects various driver branches including R470, R465, R460, R450, R418, and R390 (NVIDIA Bulletin).

The vulnerability requires local access with low attack complexity and low privileges to exploit. No user interaction is needed for exploitation, making it relatively straightforward for an attacker with local access to leverage (NVIDIA Bulletin).

NVIDIA has released security updates to address this vulnerability. For Windows systems, users should update to version 471.41 for R470 branch, 462.96 for R460 branch, 453.10 for R450 branch, and 392.67 for R390 branch. Hardware vendors may also provide specific driver versions (462.86, 466.83, 471.35, and 471.36) that contain the security updates (NVIDIA Bulletin).