← Back

CVE-2022-42261

nvd nist
Published: Dec 30, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service.

Affected (7)

Nvidia
3 products
Virtual Gpu
Cloud Gaming
Gpu Display Driver
Configuration A
3 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Nvidia
Virtual Gpu
Before 11.11
Virtual Gpu
From 12.0 to 13.6
Virtual Gpu
From 14.0 to 14.4
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Vmware
Vsphere
All versions
Configuration B
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Cloud Gaming
Before 525.60.12
Running on/withPlatform Versions
Citrix
Hypervisor
All versions
Redhat
Enterprise Linux Kernel Based Virtual Machine
All versions
Configuration C
4 platform
Running on/withPlatform Versions
Nvidia
Geforce
All versions
Nvidia
Nvs
All versions
Nvidia
Quadro
All versions
Nvidia
Rtx
All versions
Configuration D
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nvidia
Gpu Display Driver
From 450 to 450.216.04
Gpu Display Driver
From 470 to 470.161.03
Gpu Display Driver
From 510 to 510.108.03
Running on/withPlatform Versions
Nvidia
Tesla
All versions

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (4)

Source: psirt@nvidia.com
Vendor Advisory
Source: psirt@nvidia.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.