CVE-2021-1093: 
NVIDIA Graphics Driver vulnerability analysis and mitigation

CVE-2021-1093 affects NVIDIA GPU Display Driver for Windows and Linux, discovered and disclosed in July 2021. The vulnerability exists in the firmware where the driver contains an assert() or similar statement that can be triggered by an attacker (NVIDIA Security).

The vulnerability has a CVSS v3.1 base score of 6.2 with a vector of AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating local access is required with low attack complexity and no privileges or user interaction needed (NVIDIA Security).

When exploited, this vulnerability can lead to an application exit or other behavior that is more severe than necessary, potentially resulting in denial of service or system crash (NVIDIA Security).

The vulnerability requires local access to exploit, with no privileges required. The attack complexity is rated as low, making it relatively straightforward to exploit once local access is obtained (NVIDIA Security).

NVIDIA has released security updates for affected products. For Linux systems, the fixed versions are: R470 version 470.57.02, R460 version 460.91.03, R450 version 450.142.00, R418 version 418.211.00, and R390 version 390.144. For Windows systems, the fixed versions are: R470 version 471.41, R460 version 462.96, R450 version 453.10, and R390 version 392.67 (NVIDIA Security).