CVE-2021-1087

MEDIUM

5.5

CVSS Score

Published: April 29, 2021 at 06:50 PM UTC

Updated: June 17, 2026 at 03:30 AM UTC

2 products affected across 1 vendorVirtual GPU ManagerVirtual GPU· also runs on 4 platforms

Using NVIDIA Virtual GPU Software by NVIDIA?

Get instant alerts when new vulnerabilities affect NVIDIA Virtual GPU Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin), which could allow an attacker to retrieve information that could lead to a Address Space Layout Randomization (ASLR) bypass. This affects vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior to 8.7).

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Virtual GPU Manager · NVIDIA

95%

11.0 ≤ v < 11.412.0 ≤ v < 12.28.0 ≤ v < 8.7

Affected range stops below 11.4, so it looks safe — our inference, not a vendor statement

Affected range stops below 12.2, so it looks safe — our inference, not a vendor statement

Affected range stops below 8.7, so it looks safe — our inference, not a vendor statement

citrix-hypervisor (environment) · nutanix-ahv (environment) · redhat-enterprise-linux-kernel-based-virtual-machine (environment) · vmware-vsphere (environment)

Virtual GPU · NVIDIA

60%

v < 12.2

Affected range stops below 12.2, so it looks safe — our inference, not a vendor statement