CVE-2021-23201
NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller which may...
NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevated privileges to generate valid microcode by identifying, exploiting, and loading vulnerable microcode. Such an attack could lead to information disclosure, data corruption, or denial of service of the device. The scope may extend to other components.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevated privileges to generate valid microcode by identifying, exploiting, and loading vulnerable microcode. Such an attack could lead to information disclosure, data corruption, or denial of service of the device. The scope may extend to other components.
- Record
CVE-2021-23201- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
EUVDEUVD-2021-10306
NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevated privileges to generate valid microcode by identifying, exploiting, and loading vulnerable microcode. Such an attack could lead to information disclosure, data corruption, or denial of service of the device. The scope may extend to other components.
- Record
EUVD-2021-10306- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cwp3-mhhm-w8cr No score
NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller which may...
NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller which may allow a user with elevated privileges to generate valid microcode. This could lead to information disclosure, data corruption, or denial of service of the device.
- Record
GHSA-cwp3-mhhm-w8cr- Updated
- 2026-11-02
NVD
NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevated privileges to generate valid microcode by identifying, exploiting, and loading vulnerable microcode. Such an attack could lead to information disclosure, data corruption, or denial of service of the device. The scope may extend to other components.
- Record
CVE-2021-23201- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
Affected products
- nvidia gpu and tegra hardware
- nvidia geforce gtx 950
- nvidia geforce gtx 960
- nvidia geforce gtx 970
- nvidia geforce gtx 980
- nvidia geforce gtx titan x
- nvidia jetson nano
- nvidia jetson tx1
- nvidia quadro m1000m
- nvidia quadro m1200
- nvidia quadro m2000
- nvidia quadro m2000m
Show 24 moreShow less
- nvidia quadro m2200
- nvidia quadro m3000m
- nvidia quadro m4000
- nvidia quadro m4000m
- nvidia quadro m5000
- nvidia quadro m5000m
- nvidia quadro m500m
- nvidia quadro m520
- nvidia quadro m5500
- nvidia quadro m6000
- nvidia quadro m600m
- nvidia quadro m620
- nvidia shield tv
- nvidia shield tv pro
- nvidia tesla m10
- nvidia tesla m2050
- nvidia tesla m2070
- nvidia tesla m2070q
- nvidia tesla m2090
- nvidia tesla m4
- nvidia tesla m40
- nvidia tesla m6
- nvidia tesla m60
- nvidia tesla p100
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-23201 is a high vulnerability (CVSS 7.5) in Nvidia Gpu And Tegra Hardware, published November 20, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 21st percentile. No source names a fixed version.