5.5

CVE-2022-21815

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs where a NULL pointer dereference in the kernel, created within user mode code, may lead to a denial of service in the form of a system crash.

Data is provided by the National Vulnerability Database (NVD)
Nvidia ≫ Cloud Gaming Guest Version-
   Microsoft ≫ Windows Version-
Nvidia ≫ Geforce Version-
   Microsoft ≫ Windows Version-
Nvidia ≫ Gpu Display Driver Version-
   Microsoft ≫ Windows Version-
Nvidia ≫ Nvs Version-
   Microsoft ≫ Windows Version-
Nvidia ≫ Quadro Version-
   Microsoft ≫ Windows Version-
Nvidia ≫ Rtx Version-
   Microsoft ≫ Windows Version-
Nvidia ≫ Studio Version-
   Microsoft ≫ Windows Version-
Nvidia ≫ Tesla Version-
   Microsoft ≫ Windows Version-
Nvidia ≫ Virtual Gpu Version-
   Microsoft ≫ Windows Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.11
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
psirt@nvidia.com 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.