NVIDIA GPU Display Driver Vulnerability Could Lead to Code Execution, Data Tampering
CVE-2024-0117
7.8HIGH
Summary
A vulnerability exists in the NVIDIA GPU Display Driver for Windows, specifically within the user mode layer. This issue allows an unprivileged regular user to trigger an out-of-bounds read, which can potentially be exploited to execute arbitrary code. The implications of this vulnerability include denial of service, escalation of privileges, and risks of information disclosure and data tampering. Organizations using affected versions are advised to update their drivers to mitigate these risks. Detailed information can be found in NVIDIA support resources.
Affected Version(s)
GPU, vGPU, and Cloud Gaming All versions prior to 17.4, 16.8, and the October 2024 release
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved