Time-Window Corrupting Vulnerability in NVIDIA GPU and Tegra Hardware

CVE-2021-23217 · HIGH Severity

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time window timed to corrupt code execution, which may impact confidentiality, integrity, or availability. The scope impact may extend to other components.

Learn more about our Internal Network Penetration Testing.