Lucene search

K
vulnrichmentNvidiaVULNRICHMENT:CVE-2024-0075
HistoryMar 27, 2024 - 9:52 p.m.

CVE-2024-0075 CVE

2024-03-2721:52:26
CWE-476
nvidia
github.com
6
nvidia
gpu
display driver
windows
linux
vulnerability
null-pointer dereference
parameters
denial of service
information disclosure

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

AI Score

6.8

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user may cause a NULL-pointer dereference by accessing passed parameters the validity of which has not been checked. A successful exploit of this vulnerability may lead to denial of service and limited information disclosure.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:nvidia:geforce:-:*:*:*:*:*:*:*"
    ],
    "vendor": "nvidia",
    "product": "geforce",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "551.61",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "474.89",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:nvidia:studio:-:*:*:*:*:*:*:*"
    ],
    "vendor": "nvidia",
    "product": "studio",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "551.61",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:nvidia:tesla:-:*:*:*:*:*:*:*"
    ],
    "vendor": "nvidia",
    "product": "tesla",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "551.61",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "538.33",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "474.82",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:nvidia:quadro:-:*:*:*:*:*:*:*"
    ],
    "vendor": "nvidia",
    "product": "quadro",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "551.61",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "538.33",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "474.82",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

AI Score

6.8

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial