CVE-2022-42262

CWE-787 — Out-of-bounds WriteCWE-120 — Classic Buffer Overflow4 documents4 sources
Severity
7.8HIGH
EPSS
0.1%
top 69.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Nvidia Cloud GamingNvidia GPU Display DriverNvidia Virtual GPU
Timeline
PublishedDec 30

Description

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages8 packages

▶NVDnvidia/virtual_gpu12.0 — 13.6+2
▶NVDnvidia/cloud_gaming< 525.60.12
▶NVDnvidia/gpu_display_driver470 — 470.161.03+2
▶Debiannvidia-graphics-drivers< 470.161.03-1+3
▶Debiannvidia-graphics-drivers-tesla< 510.108.03-1

🔴Vulnerability Details

2
OSV
CVE-2022-42262: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffe↗2022-12-30
▶
CVEList
CVE-2022-42262: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffe↗2022-12-30
▶

📋Vendor Advisories

1
Debian
CVE-2022-42262: nvidia-graphics-drivers - NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU p...↗2022
▶
CVE-2022-42262 (HIGH CVSS 7.8) | NVIDIA vGPU software contains a vul | cvebase.io