CVE-2021-23217

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-11-20 · updated 2026-06-17

Description

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time window timed to corrupt code execution, which may impact confidentiality, integrity, or availability. The scope impact may extend to other components.

Affected products

NVIDIA Geforce Gt 605: all versions
NVIDIA Geforce Gt 610: all versions
NVIDIA Geforce Gt 620: all versions
NVIDIA Geforce Gt 625: all versions
NVIDIA Geforce Gt 630: all versions
NVIDIA Geforce Gt 635: all versions
NVIDIA Geforce Gt 640: all versions
NVIDIA Geforce Gt 705: all versions
NVIDIA Geforce Gt 710: all versions
NVIDIA Geforce Gt 720: all versions
NVIDIA Geforce Gt 730: all versions
NVIDIA Geforce Gt 740: all versions
NVIDIA Geforce Gtx 645: all versions
NVIDIA Geforce Gtx 650: all versions
NVIDIA Geforce Gtx 650 Ti: all versions
NVIDIA Geforce Gtx 650 Ti Boost: all versions
NVIDIA Geforce Gtx 660: all versions
NVIDIA Geforce Gtx 660 Ti: all versions
NVIDIA Geforce Gtx 670: all versions
NVIDIA Geforce Gtx 680: all versions
NVIDIA Geforce Gtx 690: all versions
NVIDIA Geforce Gtx 745: all versions
NVIDIA Geforce Gtx 750: all versions
NVIDIA Geforce Gtx 750 Ti: all versions
NVIDIA Geforce Gtx 760: all versions
NVIDIA Geforce Gtx 760 Ti: all versions
NVIDIA Geforce Gtx 770: all versions
NVIDIA Geforce Gtx 780: all versions
NVIDIA Geforce Gtx 780 Ti: all versions
NVIDIA Geforce Gtx 950: all versions

References

Get alerted when CVE-2021-23217 or the next vulnerability affects your stack