CVE-2022-31617
published 2022-11-19CVE-2022-31617: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an…
PriorityP337high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.24%
15.0th percentile
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds read, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nvidia | cloud_gaming_guest | < 516.94 | 516.94 |
| nvidia | gpu_display_driver | >= 451.48 < 453.64 | 453.64 |
| nvidia | gpu_display_driver | >= 471.11 < 473.81 | 473.81 |
| nvidia | gpu_display_driver | >= 471.11 < 472.81 | 472.81 |
| nvidia | gpu_display_driver | >= 511.09 < 513.46 | 513.46 |
| nvidia | gpu_display_driver | >= 516.25 < 516.94 | 516.94 |
| nvidia | nvidia_cloud_gaming | — | — |
| nvidia | virtual_gpu | — | — |
| nvidia | virtual_gpu | >= 11.0 < 11.8 | 11.8 |
| nvidia | virtual_gpu | >= 13.0 < 13.3 | 13.3 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-m2hf-3mjj-vh34: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm
ghsa_unreviewed·2022-11-19
CVE-2022-31617 [HIGH] CWE-125 GHSA-m2hf-3mjj-vh34: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds read, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.
OSV
CVE-2022-31617: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm
osv·2022-11-19·CVSS 7.8
CVE-2022-31617 [HIGH] CVE-2022-31617: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds read, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-11-19
Published