7.8

CVE-2022-31606

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a failure to properly validate data might allow an attacker with basic user capabilities to cause an out-of-bounds access in kernel mode, which could lead to denial of service, information disclosure, escalation of privileges, or data tampering.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
NvidiaGpu Display Driver SwPlatformwindows Version >= 471.11 < 473.81
   NvidiaGeforce Version-
NvidiaGpu Display Driver SwPlatformwindows Version >= 516.25 < 516.94
   NvidiaGeforce Version-
NvidiaVirtual Gpu Version >= 11.0 < 11.8
   MicrosoftWindows Version-
NvidiaVirtual Gpu Version >= 13.0 < 13.3
   MicrosoftWindows Version-
NvidiaVirtual Gpu Version14.0
   MicrosoftWindows Version-
NvidiaCloud Gaming Guest Version < 516.94
   MicrosoftWindows Version-
NvidiaGpu Display Driver SwPlatformwindows Version >= 516.25 < 516.94
   NvidiaStudio Version-
NvidiaGpu Display Driver SwPlatformwindows Version >= 471.11 < 473.81
   NvidiaStudio Version-
NvidiaGpu Display Driver SwPlatformwindows Version >= 511.09 < 513.46
   NvidiaStudio Version-
NvidiaGpu Display Driver SwPlatformwindows Version >= 516.25 < 516.94
   NvidiaStudio Version-
NvidiaGpu Display Driver SwPlatformwindows Version >= 451.48 < 453.64
   NvidiaTesla Version-
NvidiaGpu Display Driver SwPlatformwindows Version >= 471.11 < 472.81
   NvidiaTesla Version-
NvidiaGpu Display Driver SwPlatformwindows Version >= 511.09 < 513.46
   NvidiaTesla Version-
NvidiaGpu Display Driver SwPlatformwindows Version >= 516.25 < 516.94
   NvidiaTesla Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.384
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
psirt@nvidia.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.