Vulnerability Spotlight: Multiple memory corruption vulnerabilities in NVIDIA GPU driver

Piotr Bania of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered four vulnerabilities in the NVIDIA D3D10 driver for graphics cards that could allow an attacker to corrupt memory and write arbitrary memory on the card. NVIDIA graphics... This is on...

Vulnerability of the drm_lease_held function (drivers/gpu/drm/drm_lease.c) in the Linux operating system’s kernel, allowing a hacker to trigger a service failure or disclose protected information

The vulnerability of the drmleaseheld function drivers/gpu/drm/drmlease.c in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure or disclose protected information using a...

NVIDIA GPU Display Driver 缓冲区错误漏洞

An out-of-bounds write vulnerability exists in NVIDIA GPU Display Driver for Windows and Linux, which can be exploited by attackers to It can be exploited to cause code execution, denial of service, privilege escalation, information disclosure, and data tampering...

NVIDIA GPU Display Driver 缓冲区错误漏洞

NVIDIA GPU Display Driver is a driver software from NVIDIA Corporation that is used for interactive support of graphics card display modules in operating systems. A buffer error vulnerability exists in the NVIDIA GPU Display Driver, which could allow an unauthorized attacker on a network to cause...

CVE-2022-28184

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape, where an unprivileged regular user can access administrator- privileged registers, which may lead to denial of service, information disclosure, and data...

CVE-2022-28181

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denial of service, escalation of privileges,...

NVIDIA GPU Display Driver 输入验证错误漏洞

NVIDIA GPU Display Driver is a driver software from NVIDIA Corporation that is used for interactive support of graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver that originates from unverified or incorrectly verified received input or...

CVE-2022-28184

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape, where an unprivileged regular user can access administrator- privileged registers, which may lead to denial of service, information disclosure, and data...

NVIDIA GPU Display Driver 安全漏洞

NVIDIA GPU Display Driver for Windows is an American Nvidia Nvidia company's driver software for interactive support of the graphics card display module in the Windows system. A denial of service vulnerability exists in the kernel mode layer nvlddmkm.sys of the DXGKDiesce for Windows and Linux of...

NVIDIA GPU Display Driver 输入验证错误漏洞

NVIDIA GPU Display Driver is a driver software from NVIDIA Corporation that is used for interactive support of graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver that originates from incorrect input validation. An attacker could cause ...

CVE-2022-28181

NVIDIA GPU Display Driver for Windows and Linux is affected by CVE‑2022‑28181 in the kernel mode layer. A specially crafted shader could trigger an out‑of‑bounds write by an unprivileged network user, potentially enabling code execution, denial of service, privilege/escalation, information disclo...

CVE-2022-28192

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager nvidia.ko, where it may lead to a use-after-free, which in turn may cause denial of service. This attack is complex to carry out because the attacker needs to have control over freeing some host side resources out of sequenc...

CVE-2022-28183

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause an out-of-bounds read, which may lead to denial of service and information disclosure...

NVIDIA GPU Display Driver 输入验证错误漏洞

NVIDIA GPU Display Driver for Windows is an American Nvidia Nvidia company's driver software for interactive support of the graphics card display module in the Windows system. An input validation error vulnerability exists in the kernel mode layer nvlddmkm.sys handler of the NVIDIA GPU Display...

CVE-2022-28181

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denial of service, escalation of privileges,...

CVE-2022-28184

CVE-2022-28184 affects NVIDIA GPU Display Driver (Windows/Linux) in the kernel mode layer nvlddmkm.sys, specifically the DxgkDdiEscape handler. An unprivileged local user can access administrator-privileged registers, potentially causing denial of service, information disclosure, and data tamperi...

CVE-2022-28183

CVE-2022-28183 affects NVIDIA GPU Display Driver for Windows and Linux, in the kernel mode layer. An unprivileged user can trigger an out-of-bounds read, causing denial of service and information disclosure. Reports across multiple sources confirm the issue and note patches/upgrades are required ...

CVE-2022-28185

The CVE-2022-28185 issue affects the NVIDIA GPU Display Driver for Windows and Linux, specifically the ECC layer. An unprivileged local user can trigger an out-of-bounds write in the ECC memory handling, potentially causing denial of service and data tampering. Documents confirm this vulnerabilit...

NVIDIA vGPU Manager 资源管理错误漏洞

NVIDIA vGPU Software is a management software for providing GPU capabilities to virtual machines from NVIDIA Corporation. NVIDIA vGPU Softwar is vulnerable to a resource management error that could be exploited to trigger an uncontrolled denial of service due to resource consumption...

CVE-2022-28185

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the ECC layer, where an unprivileged regular user can cause an out-of-bounds write, which may lead to denial of service and data tampering...