← Back

CVE-2022-31616

nvd nist
Published: Nov 19, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Exploitability: 1.8 / Impact: 5.2
Source: NVD

Description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic capabilities can cause an out-of-bounds read, which may lead to denial of service, or information disclosure.

Affected (9)

Nvidia
3 products
Virtual Gpu
Cloud Gaming Guest
Gpu Display Driver
Configuration A
1 platform
Running on/withPlatform Versions
Nvidia
Geforce
All versions
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Nvidia
Virtual Gpu
From 11.0 to 11.8
Virtual Gpu
From 13.0 to 13.3
Virtual Gpu
Version 14.0
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cloud Gaming Guest
Before 516.94
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Gpu Display Driver
From 471.11 to 473.81
Running on/withPlatform Versions
Nvidia
Studio
All versions
Configuration F
4 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nvidia
Gpu Display Driver
From 451.48 to 453.64
Gpu Display Driver
From 471.11 to 472.81
Gpu Display Driver
From 511.09 to 513.46
Gpu Display Driver
From 516.25 to 516.94
Running on/withPlatform Versions
Nvidia
Tesla
All versions

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: psirt@nvidia.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.