{"id":"CVE-2021-23217","aliases":["EUVD-2021-10320","GHSA-mjvf-fv64-9xrq"],"status":"published","title":"NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may...","description":"NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time window timed to corrupt code execution, which may impact confidentiality, integrity, or availability. The scope impact may extend to other components.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00312,"percentile":0.2428,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2021-11-20T14:55:23Z","modified":"2026-06-17T03:38:26Z","products":[{"vendor":"nvidia","product":"geforce_gt_605"},{"vendor":"nvidia","product":"geforce_gt_610"},{"vendor":"nvidia","product":"geforce_gt_620"},{"vendor":"nvidia","product":"geforce_gt_625"},{"vendor":"nvidia","product":"geforce_gt_630"},{"vendor":"nvidia","product":"geforce_gt_635"},{"vendor":"nvidia","product":"geforce_gt_640"},{"vendor":"nvidia","product":"geforce_gt_705"},{"vendor":"nvidia","product":"geforce_gt_710"},{"vendor":"nvidia","product":"geforce_gt_720"},{"vendor":"nvidia","product":"geforce_gt_730"},{"vendor":"nvidia","product":"geforce_gt_740"},{"vendor":"nvidia","product":"geforce_gtx_645"},{"vendor":"nvidia","product":"geforce_gtx_650"},{"vendor":"nvidia","product":"geforce_gtx_650_ti"},{"vendor":"nvidia","product":"geforce_gtx_650_ti_boost"},{"vendor":"nvidia","product":"geforce_gtx_660"},{"vendor":"nvidia","product":"geforce_gtx_660_ti"},{"vendor":"nvidia","product":"geforce_gtx_670"},{"vendor":"nvidia","product":"geforce_gtx_680"},{"vendor":"nvidia","product":"geforce_gtx_690"},{"vendor":"nvidia","product":"geforce_gtx_745"},{"vendor":"nvidia","product":"geforce_gtx_750"},{"vendor":"nvidia","product":"geforce_gtx_750_ti"},{"vendor":"nvidia","product":"geforce_gtx_760"},{"vendor":"nvidia","product":"geforce_gtx_760_ti"},{"vendor":"nvidia","product":"geforce_gtx_770"},{"vendor":"nvidia","product":"geforce_gtx_780"},{"vendor":"nvidia","product":"geforce_gtx_780_ti"},{"vendor":"nvidia","product":"geforce_gtx_950"},{"vendor":"nvidia","product":"geforce_gtx_960"},{"vendor":"nvidia","product":"geforce_gtx_970"},{"vendor":"nvidia","product":"geforce_gtx_980"},{"vendor":"nvidia","product":"geforce_gtx_titan_x"},{"vendor":"nvidia","product":"gtx_titan"},{"vendor":"nvidia","product":"gtx_titan_black"},{"vendor":"nvidia","product":"gtx_titan_z"},{"vendor":"nvidia","product":"jetson_nano"},{"vendor":"nvidia","product":"jetson_tx1"},{"vendor":"nvidia","product":"nvidia gpu and tegra hardware"},{"vendor":"nvidia","product":"quadro_m1000m"},{"vendor":"nvidia","product":"quadro_m1200"},{"vendor":"nvidia","product":"quadro_m2000"},{"vendor":"nvidia","product":"quadro_m2000m"},{"vendor":"nvidia","product":"quadro_m2200"},{"vendor":"nvidia","product":"quadro_m3000m"},{"vendor":"nvidia","product":"quadro_m4000"},{"vendor":"nvidia","product":"quadro_m4000m"},{"vendor":"nvidia","product":"quadro_m5000"},{"vendor":"nvidia","product":"quadro_m5000m"},{"vendor":"nvidia","product":"quadro_m500m"},{"vendor":"nvidia","product":"quadro_m520"},{"vendor":"nvidia","product":"quadro_m5500"},{"vendor":"nvidia","product":"quadro_m6000"},{"vendor":"nvidia","product":"quadro_m600m"},{"vendor":"nvidia","product":"quadro_m620"},{"vendor":"nvidia","product":"shield_tv"},{"vendor":"nvidia","product":"shield_tv_pro"},{"vendor":"nvidia","product":"tesla_m10"},{"vendor":"nvidia","product":"tesla_m4"},{"vendor":"nvidia","product":"tesla_m40"},{"vendor":"nvidia","product":"tesla_m6"},{"vendor":"nvidia","product":"tesla_m60"},{"vendor":"nvidia","product":"tesla_p100"}],"references":[{"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5263","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23217"},{"url":"https://github.com/advisories/GHSA-mjvf-fv64-9xrq"}],"sources":{"cve":[{"id":"CVE-2021-23217","description":"NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time window timed to corrupt code execution, which may impact confidentiality, integrity, or availability. The scope impact may extend to other components.","status":"published","published":"2021-11-20T14:55:23Z","modified":"2024-08-03T19:05:55.701Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:33:00.488332Z"}],"euvd":[{"id":"EUVD-2021-10320","description":"NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time window timed to corrupt code execution, which may impact confidentiality, integrity, or availability. The scope impact may extend to other components.","status":"published","published":"2021-11-20T14:55:23Z","modified":"2024-08-03T19:05:55Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:25:00.126172Z"}],"ghsa":[{"id":"GHSA-mjvf-fv64-9xrq","title":"NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may...","description":"NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to instantiate a specifically timed DMA write to corrupt code execution, which may impact confidentiality, integrity, or availability.","status":"published","published":"2022-05-24T19:21:10Z","modified":"2023-01-30T05:04:05Z","updated_at":"2026-11-02T14:46:58.413117Z"}],"nvd":[{"id":"CVE-2021-23217","description":"NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time window timed to corrupt code execution, which may impact confidentiality, integrity, or availability. The scope impact may extend to other components.","status":"published","published":"2021-11-20T15:15:07.89Z","modified":"2026-06-17T03:38:26.32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:07:01.428028Z"}]}}