Denial of Service Vulnerability in NVIDIA GPU Display Driver for Windows
CVE-2022-28188

5.5MEDIUM

Key Information:

Vendor

Nvidia
Status
Nvidia Gpu Display Driver
Vendor
CVE Published:
17 May 2022

What is CVE-2022-28188?

The NVIDIA GPU Display Driver for Windows has a vulnerability in the kernel mode layer (nvlddmkm.sys) concerning the DxgkDdiEscape handler. The vulnerability allows improper validation of input data, which could lead to scenarios where the product fails to process the data securely. This lack of proper input validation may enable attackers to cause a denial of service condition, impacting system stability and usability.

Affected Version(s)

NVIDIA GPU Display Driver All GPU Driver versions for Windows

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5353
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2022-28188 : Denial of Service Vulnerability in NVIDIA GPU Display Driver for Windows