NVIDIA GPU Display Driver Vulnerability Allows for Code Execution and Other Threats
CVE-2024-0120
7.8HIGH
Summary
The NVIDIA GPU Display Driver for Windows contains a vulnerability in its user mode layer that allows unprivileged users to exploit an out-of-bounds read. This flaw poses significant security risks including the possibility of unauthorized code execution, potential denial of service, and escalation of privileges. Furthermore, it potentially enables information disclosure and data tampering, which can severely compromise system integrity and user data.
Affected Version(s)
GPU, vGPU, and Cloud Gaming All versions prior to 17.4, 16.8, and the October 2024 release
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved