NVIDIA GPU Display Driver Vulnerability Could Lead to Code Execution, Data Tampering
CVE-2024-0119
7.8HIGH
Summary
The NVIDIA GPU Display Driver for Windows features a vulnerability in its user mode layer, allowing an unprivileged regular user to trigger an out-of-bounds read. Such exploitation may result in a range of consequences including unauthorized code execution, denial of service conditions, potential privilege escalation, information leakage, and data integrity issues. This vulnerability poses significant risks in environments where the GPU driver is utilized, emphasizing the need for timely updates and robust security practices.
Affected Version(s)
GPU, vGPU, and Cloud Gaming All versions prior to 17.4, 16.8, and the October 2024 release
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved