7.1

CVE-2022-31616

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic capabilities can cause an out-of-bounds read, which may lead to denial of service, or information disclosure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nvidia ≫ Gpu Display Driver SwPlatform windows Version >= 471.11 < 473.81
   Nvidia ≫ Geforce Version -
Nvidia ≫ Gpu Display Driver SwPlatform windows Version >= 516.25 < 516.94
   Nvidia ≫ Geforce Version -
Nvidia ≫ Virtual Gpu Version >= 11.0 < 11.8
   Microsoft ≫ Windows Version -
Nvidia ≫ Virtual Gpu Version >= 13.0 < 13.3
   Microsoft ≫ Windows Version -
Nvidia ≫ Virtual Gpu Version 14.0
   Microsoft ≫ Windows Version -
Nvidia ≫ Cloud Gaming Guest Version < 516.94
   Microsoft ≫ Windows Version -
Nvidia ≫ Gpu Display Driver SwPlatform windows Version >= 516.25 < 516.94
   Nvidia ≫ Studio Version -
Nvidia ≫ Gpu Display Driver SwPlatform windows Version >= 471.11 < 473.81
   Nvidia ≫ Studio Version -
Nvidia ≫ Gpu Display Driver SwPlatform windows Version >= 511.09 < 513.46
   Nvidia ≫ Studio Version -
Nvidia ≫ Gpu Display Driver SwPlatform windows Version >= 516.25 < 516.94
   Nvidia ≫ Studio Version -
Nvidia ≫ Gpu Display Driver SwPlatform windows Version >= 451.48 < 453.64
   Nvidia ≫ Tesla Version -
Nvidia ≫ Gpu Display Driver SwPlatform windows Version >= 471.11 < 472.81
   Nvidia ≫ Tesla Version -
Nvidia ≫ Gpu Display Driver SwPlatform windows Version >= 511.09 < 513.46
   Nvidia ≫ Tesla Version -
Nvidia ≫ Gpu Display Driver SwPlatform windows Version >= 516.25 < 516.94
   Nvidia ≫ Tesla Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.069
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Nvidia 6.1 1.8 4.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://nvidia.custhelp.com/app/answers/detail/a_id/5383
Patch
Vendor Advisory