7.8

CVE-2024-0090

NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Data is provided by the National Vulnerability Database (NVD)
Nvidia ≫ Gpu Display Driver SwPlatformwindows Version >= 470 < 475.06
   Nvidia ≫ Geforce Version-
   Nvidia ≫ Nvs Version-
   Nvidia ≫ Quadro Version-
   Nvidia ≫ Rtx Version-
   Nvidia ≫ Studio Version-
   Nvidia ≫ Tesla Version-
Nvidia ≫ Gpu Display Driver SwPlatformwindows Version >= 535 < 538.67
   Nvidia ≫ Geforce Version-
   Nvidia ≫ Nvs Version-
   Nvidia ≫ Quadro Version-
   Nvidia ≫ Rtx Version-
   Nvidia ≫ Studio Version-
   Nvidia ≫ Tesla Version-
Nvidia ≫ Gpu Display Driver SwPlatformwindows Version >= 550 < 552.55
   Nvidia ≫ Geforce Version-
   Nvidia ≫ Nvs Version-
   Nvidia ≫ Quadro Version-
   Nvidia ≫ Rtx Version-
   Nvidia ≫ Studio Version-
   Nvidia ≫ Tesla Version-
Nvidia ≫ Gpu Display Driver SwPlatformwindows Version >= 555 < 555.99
   Nvidia ≫ Geforce Version-
   Nvidia ≫ Nvs Version-
   Nvidia ≫ Quadro Version-
   Nvidia ≫ Rtx Version-
   Nvidia ≫ Studio Version-
   Nvidia ≫ Tesla Version-
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 470 < 470.256.02
   Nvidia ≫ Geforce Version-
   Nvidia ≫ Nvs Version-
   Nvidia ≫ Quadro Version-
   Nvidia ≫ Rtx Version-
   Nvidia ≫ Tesla Version-
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 535 < 535.180.01
   Nvidia ≫ Geforce Version-
   Nvidia ≫ Nvs Version-
   Nvidia ≫ Quadro Version-
   Nvidia ≫ Rtx Version-
   Nvidia ≫ Tesla Version-
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 550 < 550.90.07
   Nvidia ≫ Geforce Version-
   Nvidia ≫ Nvs Version-
   Nvidia ≫ Quadro Version-
   Nvidia ≫ Rtx Version-
   Nvidia ≫ Tesla Version-
Nvidia ≫ Gpu Display Driver SwPlatformlinux Version >= 555 < 555.52.04
   Nvidia ≫ Geforce Version-
   Nvidia ≫ Nvs Version-
   Nvidia ≫ Quadro Version-
   Nvidia ≫ Rtx Version-
   Nvidia ≫ Tesla Version-
Nvidia ≫ Virtual Gpu Version < 13.11
   Canonical ≫ Ubuntu Linux Version-
   Citrix ≫ Hypervisor Version-
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-
   Redhat ≫ Enterprise Linux Kernel-based Virtual Machine Version-
   VMware ≫ Vsphere Version-
Nvidia ≫ Virtual Gpu Version >= 14.0 < 16.6
   Canonical ≫ Ubuntu Linux Version-
   Citrix ≫ Hypervisor Version-
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-
   Redhat ≫ Enterprise Linux Kernel-based Virtual Machine Version-
   VMware ≫ Vsphere Version-
Nvidia ≫ Virtual Gpu Version >= 17.0 < 17.2
   Canonical ≫ Ubuntu Linux Version-
   Citrix ≫ Hypervisor Version-
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-
   Redhat ≫ Enterprise Linux Kernel-based Virtual Machine Version-
   VMware ≫ Vsphere Version-
Nvidia ≫ Cloud Gaming Version < 555.99
   Microsoft ≫ Windows Version-
Nvidia ≫ Cloud Gaming Version < 555.52.04
   Linux ≫ Linux Kernel Version-
   Redhat ≫ Enterprise Linux Kernel-based Virtual Machine Version-
   VMware ≫ Vsphere Version-
Nvidia ≫ Virtual Gpu Version < 17.2
   Microsoft ≫ Azure Stack Hci Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.17% 0.388
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
psirt@nvidia.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.