CVE-2021-1077

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-04-21 · updated 2026-06-17
Weakness: CWE-404

Description

NVIDIA GPU Display Driver for Windows and Linux, R450 and R460 driver branch, contains a vulnerability where the software uses a reference count to manage a resource that is incorrectly updated, which may lead to denial of service.

Affected products

NVIDIA Guest driver: from 450 before 450.119.03; from 450 before 452.96; from 460 before 460.73.01; from 460 before 462.31 — fixed in 450.119.03, 452.96, 460.73.01, 462.31

How to fix

Upgrade to a fixed version: NVIDIA Guest driver 450.119.03, 452.96, 460.73.01, 462.31. Check the vendor advisory for mitigations.

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5172
https://security.gentoo.org/glsa/202310-02
https://nvidia.custhelp.com/app/answers/detail/a_id/5172
https://security.gentoo.org/glsa/202310-02

Get alerted when CVE-2021-1077 or the next vulnerability affects your stack