CVE-2024-0090
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD
Description
NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Affected (14)
Products: Nvidia: Gpu Display Driver, Virtual Gpu, Cloud Gaming
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| 470 ≤ version < 475.06 |
| Running on/with | Platform Versions |
|---|---|
Nvidia Studio | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| 470 ≤ version < 470.256.02 |
| Running on/with | Platform Versions |
|---|---|
Nvidia Geforce | All versions |
Nvidia Nvs | All versions |
Nvidia Quadro | All versions |
Nvidia Rtx | All versions |
Nvidia Tesla | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| version < 13.11 |
| Running on/with | Platform Versions |
|---|---|
Canonical Ubuntu Linux | All versions |
Citrix Hypervisor | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| version < 555.99 |
| Running on/with | Platform Versions |
|---|---|
Microsoft Windows | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| version < 555.52.04 |
| Running on/with | Platform Versions |
|---|---|
Linux Linux Kernel | All versions |
Redhat Enterprise Linux Kernel Based Virtual Machine | All versions |
Vmware Vsphere | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| version < 17.2 |
| Running on/with | Platform Versions |
|---|---|
Microsoft Azure Stack Hci | All versions |
References (2)
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.