CVE-2024-0074 CVE

2024-03-2721:52:25

CWE-788

nvidia

github.com

nvdia

gpu

linux

vulnerability

memory location

buffer overflow

denial of service

data tampering

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

AI Score

6.6

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

NVIDIA GPU Display Driver for Linux contains a vulnerability where an attacker may access a memory location after the end of the buffer. A successful exploit of this vulnerability may lead to denial of service and data tampering.

CNA Affected

[
  {
    "vendor": "nvidia",
    "product": "GPU Display driver, vGPU driver, Cloud Gaming driver",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to and including 16.3, 13.9, and all versions prior to and including the January 2024 release"
      }
    ],
    "defaultStatus": "unaffected"
  }
]