← Back

CVE-2022-31610

nvd nist
Published: Nov 19, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds write, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

Affected (9)

Nvidia
3 products
Virtual Gpu
Cloud Gaming Guest
Gpu Display Driver
Configuration A
1 platform
Running on/withPlatform Versions
Nvidia
Geforce
All versions
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Nvidia
Virtual Gpu
From 11.0 to 11.8
Virtual Gpu
From 13.0 to 13.3
Virtual Gpu
Version 14.0
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cloud Gaming Guest
Before 516.94
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Gpu Display Driver
From 471.11 to 473.81
Running on/withPlatform Versions
Nvidia
Studio
All versions
Configuration F
4 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nvidia
Gpu Display Driver
From 451.48 to 453.64
Gpu Display Driver
From 471.11 to 472.81
Gpu Display Driver
From 511.09 to 513.46
Gpu Display Driver
From 516.25 to 516.94
Running on/withPlatform Versions
Nvidia
Tesla
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

Source: psirt@nvidia.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.