CVE-2021-23217
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may...
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time window timed to corrupt code execution, which may impact confidentiality, integrity, or availability. The scope impact may extend to other components.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time window timed to corrupt code execution, which may impact confidentiality, integrity, or availability. The scope impact may extend to other components.
- Record
CVE-2021-23217- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
EUVDEUVD-2021-10320
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time window timed to corrupt code execution, which may impact confidentiality, integrity, or availability. The scope impact may extend to other components.
- Record
EUVD-2021-10320- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mjvf-fv64-9xrq No score
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may...
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to instantiate a specifically timed DMA write to corrupt code execution, which may impact confidentiality, integrity, or availability.
- Record
GHSA-mjvf-fv64-9xrq- Updated
- 2026-11-02
NVD
NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time window timed to corrupt code execution, which may impact confidentiality, integrity, or availability. The scope impact may extend to other components.
- Record
CVE-2021-23217- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
Affected products
- nvidia gpu and tegra hardware
- nvidia geforce gt 605
- nvidia geforce gt 610
- nvidia geforce gt 620
- nvidia geforce gt 625
- nvidia geforce gt 630
- nvidia geforce gt 635
- nvidia geforce gt 640
- nvidia geforce gt 705
- nvidia geforce gt 710
- nvidia geforce gt 720
- nvidia geforce gt 730
Show 52 moreShow less
- nvidia geforce gt 740
- nvidia geforce gtx 645
- nvidia geforce gtx 650
- nvidia geforce gtx 650 ti
- nvidia geforce gtx 650 ti boost
- nvidia geforce gtx 660
- nvidia geforce gtx 660 ti
- nvidia geforce gtx 670
- nvidia geforce gtx 680
- nvidia geforce gtx 690
- nvidia geforce gtx 745
- nvidia geforce gtx 750
- nvidia geforce gtx 750 ti
- nvidia geforce gtx 760
- nvidia geforce gtx 760 ti
- nvidia geforce gtx 770
- nvidia geforce gtx 780
- nvidia geforce gtx 780 ti
- nvidia geforce gtx 950
- nvidia geforce gtx 960
- nvidia geforce gtx 970
- nvidia geforce gtx 980
- nvidia geforce gtx titan x
- nvidia gtx titan
- nvidia gtx titan black
- nvidia gtx titan z
- nvidia jetson nano
- nvidia jetson tx1
- nvidia quadro m1000m
- nvidia quadro m1200
- nvidia quadro m2000
- nvidia quadro m2000m
- nvidia quadro m2200
- nvidia quadro m3000m
- nvidia quadro m4000
- nvidia quadro m4000m
- nvidia quadro m5000
- nvidia quadro m5000m
- nvidia quadro m500m
- nvidia quadro m520
- nvidia quadro m5500
- nvidia quadro m6000
- nvidia quadro m600m
- nvidia quadro m620
- nvidia shield tv
- nvidia shield tv pro
- nvidia tesla m10
- nvidia tesla m4
- nvidia tesla m40
- nvidia tesla m6
- nvidia tesla m60
- nvidia tesla p100
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-23217 is a high vulnerability (CVSS 7.5) in Nvidia Gpu And Tegra Hardware, published November 20, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 24th percentile. No source names a fixed version.