CVE-2024-0107

CVE-2024-0107 is an out-of-bounds read in the NVIDIA GPU Display Driver for Windows user-mode layer. Public findings (Talos TALOS-2024-1956) describe exploitation via a malformed shader in the NVIDIA GPU Compiler Driver, affecting NVIDIA GPU Driver versions such as 551.61 and 31.0.15.5161, with p...

CVE-2024-0089

CVE-2024-0089 affects the NVIDIA GPU Display Driver for Windows. The vulnerability allows information from a previous client or another process to be disclosed, with potential consequences including code execution, information disclosure, and data tampering. According to NVIDIA’s June 2024 securi...

CVE-2022-31617

CVE-2022-31617 affects NVIDIA GPU Display Driver for Windows (nvlddmkm.sys) where a local user with basic privileges can trigger an out-of-bounds read in the kernel mode layer, potentially enabling code execution, DoS, privilege escalation, information disclosure, or data tampering. The consolida...

CVE-2021-1076

CVE-2021-1076 affects NVIDIA GPU Display Driver for Windows and Linux (kernel mode drivers nvlddmkm.sys / nvidia.ko). The vulnerability arises from improper access control in the kernel-mode component, potentially allowing denial of service, information disclosure, or data corruption. Connected a...

CVE-2022-31608

CVE-2022-31608 affects the NVIDIA GPU Display Driver for Linux. The vulnerability lies in an optional D-Bus configuration file, where a local user with basic capabilities can impact protected D-Bus endpoints, potentially enabling code execution, denial of service, privilege escalation, informatio...

CVE-2022-31610

CVE-2022-31610 concerns the NVIDIA GPU Display Driver for Windows. The vulnerability resides in the kernel-mode layer (nvlddmkm.sys) and can be triggered by a local user with basic capabilities, causing an out-of-bounds write. This may lead to code execution, denial of service, privilege escalati...

CVE-2019-5676

CVE-2019-5676 affects NVIDIA Windows GPU Display Driver installer where DLLs are loaded without validating path or signature (binary planting). This local, pre-auth escalation could allow code execution if a malicious DLL is placed on the system. Documents identify affected drivers/updates, inclu...

CVE-2022-31606

CVE-2022-31606 affects the NVIDIA GPU Display Driver for Windows. The vulnerability resides in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where improper validation can allow a local attacker with basic user privileges to trigger out-of-bounds kernel-mode access, potentially l...

CVE-2022-31616

CVE-2022-31616 details (concrete): The vulnerability affects the NVIDIA GPU Display Driver for Windows, specifically the kernel-mode handler nvlddmkm.sys DxgkDdiEscape. A local user with basic privileges can trigger an out-of-bounds read, leading to either denial of service or information disclos...

CVE-2022-31612

CVE-2022-31612 concerns the NVIDIA GPU Display Driver for Windows. The kernel-mode layer (nvlddmkm.sys)’s DxgkDdiEscape handler allows a local user with basic privileges to trigger an out-of-bounds read, potentially causing a system crash or leaking internal kernel information. The provided docum...

CVE-2022-31607

CVE-2022-31607 affects the NVIDIA GPU Display Driver for Linux, specifically the kernel mode driver (nvidia.ko). A local user with basic privileges can trigger improper input validation, leading to denial of service, privilege escalation, data tampering, and partial information disclosure. Connec...

CVE-2024-0091

CVE-2024-0091 affects NVIDIA GPU Display Driver for Windows and Linux, enabling an untrusted pointer dereference via a driver API and potentially causing denial of service, information disclosure, and data tampering. The vulnerability is rated CVSS v3.1 base 7.8 (HIGH) with local attack vector an...

CVE-2022-28183

CVE-2022-28183 affects NVIDIA GPU Display Driver for Windows and Linux, in the kernel mode layer. An unprivileged user can trigger an out-of-bounds read, causing denial of service and information disclosure. Reports across multiple sources confirm the issue and note patches/upgrades are required ...

CVE-2021-1089

CVE-2021-1089 affects NVIDIA GPU Display Driver for Windows, with a vulnerability in nvidia-smi that allows an uncontrolled DLL loading path, potentially enabling local arbitrary code execution, denial of service, information disclosure, or data tampering. NVIDIA’s security bulletin lists Windows...

CVE-2022-31613

CVE-2022-31613 affects the NVIDIA GPU Display Driver for Windows. The vulnerability is in the kernel-mode layer (nvlddmkm.sys) and can be exploited by a local user to trigger a null-pointer dereference, potentially causing a kernel panic and impacting system stability. Sources describe the issue ...

CVE-2021-1090

CVE-2021-1090 affects the NVIDIA GPU Display Driver for Windows and Linux, specifically the kernel-mode nvlddmkm.sys handler for control calls. The vulnerability arises when the driver reads or writes to a buffer using an index or pointer that references memory after the buffer end, enabling data...

CVE-2022-42257

CVE-2022-42257 affects the NVIDIA GPU Display Driver for Linux, specifically the kernel mode layer (nvidia.ko). The public description states an integer overflow in this component may lead to information disclosure, data tampering, or denial of service. Connected sources corroborate affected fami...

CVE-2021-1091

The CVE-2021-1091 issue affects the NVIDIA GPU Display Driver for Windows. A local, unprivileged user can create a hard link that causes the driver to overwrite a file needing elevated privileges, potentially leading to data loss or denial of service. The issue is tied to the Windows driver’s han...

CVE-2022-42265

The CVE entry CVE-2022-42265 concerns the NVIDIA GPU Display Driver for Linux, where the kernel-mode nvidia.ko contains an integer overflow in the kernel-mode layer handler. This can allow a local attacker with LOW privileges to cause information disclosure or data tampering, with no user interac...

CVE-2022-34670

CVE-2022-34670 affects NVIDIA GPU Display Driver for Linux. The kernel-mode layer handler vulnerability allows an unprivileged user to trigger truncation when casting a primitive to a smaller primitive, potentially causing denial of service or information disclosure. Debian LTS advisory DLA-3418 ...

CVE-2021-1075

CVE-2021-1075 (NVIDIA Windows GPU Display Driver) affects NVIDIA GPU Display Driver for Windows, in which the kernel-mode driver component nvlddmkm.sys erroneously dereferences a pointer to memory that may no longer be valid when handling DxgkDdiEscape. This can lead to code execution, denial of ...

CVE-2021-1092

CVE-2021-1092 affects the NVIDIA GPU Display Driver for Windows (NVIDIA Control Panel component). The vulnerability is a Windows file system symbolic link attack in the Control Panel that could allow an unprivileged local attacker to trigger the driver to overwrite privileged files, potentially c...

CVE-2021-1074

CVE-2021-1074 affects the NVIDIA Windows GPU Display Driver installer. The vulnerability enables a local-privilege attacker with system access to replace an application resource with malicious files during a narrow window between file integrity validation and execution, potentially enabling code ...

CVE-2022-42264

CVE-2022-42264 refers to a vulnerability in the NVIDIA GPU Display Driver for Linux, specifically in the kernel-mode layer (nvidia.ko) that allows an unprivileged local user to trigger an out-of-range pointer offset. This can lead to data tampering, data loss, information disclosure, or denial of...

CVE-2023-25515

CVE-2023-25515 affects NVIDIA GPU Display Driver for Windows and Linux. The issue is described as parsing of unexpected untrusted data that may lead to code execution, denial of service, privilege escalation, data tampering, or information disclosure. Public advisories (NVIDIA security bulletin, ...

CVE-2026-24190

CVE-2026-24190 affects the NVIDIA GPU Display Driver for Windows and Linux. The issue is in the kernel mode layer, allowing a user to gain improper access to GPU resources, with potential impacts including denial of service, privilege escalation, information disclosure, data tampering, and code e...

CVE-2022-34677

CVE-2022-34677 affects the NVIDIA GPU Display Driver for Linux, in the kernel mode layer handler where an unprivileged user can trigger an integer truncation, potentially causing denial of service or data tampering. Public docs indicate this vulnerability is addressed in Debian’s legacy-390xx upd...

CVE-2026-24191

CVE-2026-24191 affects NVIDIA Display Driver for Windows. The vulnerability enables a time-of-check time-of-use issue in the Windows display driver, with potential impacts including denial of service, privilege escalation, information disclosure, data tampering, and code execution. Affected produ...

CVE-2022-42258

CVE-2022-42258 affects the Linux NVIDIA GPU Display Driver (kernel mode layer nvidia.ko). The vulnerability is described as an integer overflow in the kernel-mode code that can lead to denial of service, data tampering, or information disclosure. Public references in the connected documents confi...

CVE-2022-28184

CVE-2022-28184 affects NVIDIA GPU Display Driver (Windows/Linux) in the kernel mode layer nvlddmkm.sys, specifically the DxgkDdiEscape handler. An unprivileged local user can access administrator-privileged registers, potentially causing denial of service, information disclosure, and data tamperi...

CVE-2022-42254

NVIDIA GPU Display Driver for Linux contains a kernel module (nvidia.ko) vulnerability: an out-of-bounds array access that may lead to denial of service, data tampering, or information disclosure (CVE-2022-42254). The provided documents identify the affected component and impact, but do not speci...

CVE-2022-42261

CVE-2022-42261 affects NVIDIA vGPU software, specifically the Virtual GPU Manager (vGPU plugin). The issue is an input index that is not validated, which can cause a buffer overrun. Impacts cited in sources include data tampering, information disclosure, or denial of service. The provided documen...

CVE-2022-34673

The CVE-2022-34673 vulnerability affects the NVIDIA GPU Display Driver for Linux, specifically the kernel mode layer (nvidia.ko). The issue is an out-of-bounds array access in the kernel mode layer, which may lead to denial of service, information disclosure, or data tampering. Connected sources ...

CVE-2022-42260

The CVE refers to NVIDIA vGPU Display Driver for Linux guest with a vulnerability in a D-Bus configuration file. An unauthorized user in the guest VM can impact protected D-Bus endpoints, potentially enabling code execution, denial of service, privilege escalation, information disclosure, or data...

CVE-2022-42262

CVE-2022-42262 affects NVIDIA vGPU software, specifically the Virtual GPU Manager (vGPU plugin). The vulnerability arises from an input index that is not validated, which can cause a buffer overrun. Impact as stated: data tampering, information disclosure, and denial of service. The provided docu...

CVE-2022-42263

Summary of CVE-2022-42263 – NVIDIA GPU Display Driver for Linux : The vulnerability affects the NVIDIA GPU Display Driver for Linux, specifically in the kernel mode layer handler. The issue is an integer overflow in that kernel-mode component, which the source material describes as potentially en...

CVE-2024-0090

CVE-2024-0090 affects the NVIDIA GPU driver for Windows and Linux, due to an out-of-bounds write in the driver. The confirmed impact includes code execution, denial of service, privilege escalation, information disclosure, and data tampering. Local attack vector with low privilege required per CV...

CVE-2022-34684

CVE-2022-34684 affects the NVIDIA GPU Display Driver for Linux, specifically the kernel mode driver module nvidia.ko . An off-by-one error in the kernel mode layer may lead to data tampering or information disclosure . Risk is described as local, low-privilege, no user interaction required, with ...

CVE-2026-24193

CVE-2026-24193 affects NVIDIA GPU Display Driver (Windows and Linux). The described vulnerability is an out-of-bounds write with potential to cause DoS, privilege escalation, information disclosure, data tampering and code execution. NVIDIA’s May 2026 security bulletin confirms updates addressing...

CVE-2023-25517

NVIDIA vGPU software (Virtual GPU Manager, vGPU plugin) is affected by CVE-2023-25517, where a guest OS may control resources it is not authorized to access, potentially leading to information disclosure and data tampering. Affected product is NVIDIA vGPU software; the root cause is improper acce...

CVE-2020-5966

CVE-2020-5966 : NVIDIA Windows GPU Display Driver contains a NULL pointer dereference in the kernel-mode handler DxgkDdiEscape (nvlddmkm.sys). The vulnerability affects the NVIDIA Windows GPU Display Driver across all versions, enabling a local, authenticated attacker to trigger denial of service...

CVE-2026-24194

CVE-2026-24194 affects the NVIDIA GPU Display Driver for Linux. It is a vulnerability in a kernel-mode layer handler that can allow improper permission handling. Exploitation could lead to denial of service, privilege escalation, information disclosure, data tampering, and code execution. The iss...

CVE-2023-25516

The CVE-2023-25516 issue affects NVIDIA GPU Display Driver for Linux, specifically in the kernel mode layer. An unprivileged user can trigger an integer overflow, which may result in information disclosure and denial of service. The description across sources consistently identifies a kernel-spac...

CVE-2026-24192

CVE-2026-24192 affects the NVIDIA GPU Display Driver for Linux. The issue is an incorrect conversion between numeric types that can cause a heap buffer overflow. Exploitation could lead to denial of service, privilege escalation, information disclosure, data tampering, and code execution. The con...

CVE-2026-24195

CVE-2026-24195 : NVIDIA GPU Display Driver for Linux contains a vulnerability in Unified Virtual Memory (UVM) where improper input validation could be exploited to cause a denial of service. The issue is listed in NVIDIA’s May 2026 security bulletin with a CVSS v3.1 base score of 7.1 (HIGH) and l...

CVE-2026-24196

NVIDIA GPU Display Driver for Linux contains a vulnerability (CVE-2026-24196) that could allow an out-of-bounds read, potentially leading to denial of service and information disclosure. Affected product: NVIDIA Linux display driver; root cause: out-of-bounds read in the driver. Impact: denial of...