NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert() or similar state…

published 2021-07-22 5 y ago modified 2026-06-17 4 mo ago also EUVD-2021-6560

cvss: 6.2; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.4%; EPSS 0.4% chance of exploitation in 30 days, percentile 28%
public exploits: 0; none known

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary, and may lead to denial of service or system crash.

Patch / fix

fixed in 1 distros 3 links 1

nvidia gpu_display_driver 418.211.00, 427.48, 450.142.00, 453.10, 460.91.03, 462.96

debian ubuntu arch linux

nvidia-graphics-drivers Debian 14, Debian 13, Debian 12 460.91.03-1

debian advisories DEBIAN-CVE-2021-1093

nvidia-graphics-drivers-390 Ubuntu 18.04 LTS 390.144-0ubuntu0.18.04.1
nvidia-graphics-drivers-390 Ubuntu 20.04 LTS 390.144-0ubuntu0.20.04.1
nvidia-graphics-drivers-460 Ubuntu 18.04 LTS 460.91.03-0ubuntu0.18.04.1
nvidia-graphics-drivers-460 Ubuntu 20.04 LTS 460.91.03-0ubuntu0.20.04.1
nvidia-graphics-drivers-460 Ubuntu 22.04 LTS 460.91.03-0ubuntu1
nvidia-graphics-drivers-470 Ubuntu 18.04 LTS 470.57.02-0ubuntu0.18.04.1
nvidia-graphics-drivers-470 Ubuntu 20.04 LTS 470.57.02-0ubuntu0.20.04.1
nvidia-graphics-drivers-418-server Ubuntu 18.04 LTS 418.211.00-0ubuntu0.18.04.1

ubuntu advisories UBUNTU-CVE-2021-1093

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

nvidia-utils Arch Linux 470.57.02-1

arch linux advisories AVG-2193

nvidia.custhelp.com/app/answers/detail/a_id/5211 advisory

Exploit prediction

0.35% chance of exploitation in the next 30 days, higher than 28% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	6.2	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD	3.1	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD	2.0	4.9	AV:L/AC:L/Au:N/C:N/I:N/A:C

Affected products

NVIDIA NVIDIA GPU Display Driver

Classification

Weakness

CWE-404 Improper Resource Shutdown or Release

References

nvidia.custhelp.com /app/answers/detail/a_id/5211
patch, vendor-advisory
security.gentoo.org /glsa/202310-02
vendor-advisory, third-party-advisory
lists.debian.org /debian-lts-announce/2022/01/msg00013.html
mailing-list, third-party-advisory

Sources

CVE List CVE-2021-1093
NVD CVE-2021-1093

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary