Kernel Mode Layer Vulnerability in NVIDIA GPU Display Driver for Windows
CVE-2022-28186

6.1MEDIUM

Key Information:

Vendor

Nvidia
Status
Nvidia Gpu Display Driver
Vendor
CVE Published:
17 May 2022

What is CVE-2022-28186?

A vulnerability exists in the NVIDIA GPU Display Driver for Windows specifically in the kernel mode layer handler for DxgkDdiEscape. This flaw arises from the driver's failure to properly validate input or data before processing. As a result, the driver may accept invalid input, which increases the risk of denial of service and potential data tampering. Users of the affected driver are advised to apply the latest updates to mitigate these risks.

Affected Version(s)

NVIDIA GPU Display Driver All GPU Driver versions for Windows

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5353
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.