Lucene search

K
cve[email protected]CVE-2022-34671
HistoryDec 30, 2022 - 11:15 p.m.

CVE-2022-34671

2022-12-3023:15:09
CWE-787
web.nvd.nist.gov
279
4
nvidia
gpu
display driver
windows
vulnerability
cve-2022-34671
code execution
information disclosure
denial of service

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.1%

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can cause an out-of-bounds write, which may lead to code execution, information disclosure, and denial of service.

Affected configurations

NVD
Node
nvidianvsMatch-
OR
nvidiaquadroMatch-
OR
nvidiartxMatch-
AND
nvidiagpu_display_driverRange470474.14windows
OR
nvidiagpu_display_driverRange510514.08windows
OR
nvidiagpu_display_driverRange515517.88windows
OR
nvidiagpu_display_driverRange525527.27windows
Node
nvidiateslaMatch-
AND
nvidiagpu_display_driverRange450454.02windows
OR
nvidiagpu_display_driverRange470474.14windows
OR
nvidiagpu_display_driverRange510514.08windows
OR
nvidiagpu_display_driverRange515517.88windows
OR
nvidiagpu_display_driverRange525527.41windows
Node
nvidiastudioMatch-
AND
nvidiagpu_display_driverRange525526.98windows
Node
nvidiageforceMatch-
AND
nvidiagpu_display_driverRange470474.14windows
OR
nvidiagpu_display_driverRange525526.98windows

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "NVIDIA GPU Display Driver for Windows",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to and including 15.2, 13.7, and 11.12, and all versions prior to and including the May 2023 release"
      }
    ]
  }
]

Social References

More

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.1%