CVE-2024-0090
published 2024-06-13CVE-2024-0090: NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability…
PriorityP340high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.27%
19.5th percentile
NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | nvidia-graphics-drivers | < nvidia-graphics-drivers 535.183.01-1~deb12u1 (bookworm) | nvidia-graphics-drivers 535.183.01-1~deb12u1 (bookworm) |
| debian | nvidia-graphics-drivers-legacy-340xx | < nvidia-graphics-drivers 535.183.01-1~deb12u1 (bookworm) | nvidia-graphics-drivers 535.183.01-1~deb12u1 (bookworm) |
| debian | nvidia-graphics-drivers-legacy-390xx | < nvidia-graphics-drivers 535.183.01-1~deb12u1 (bookworm) | nvidia-graphics-drivers 535.183.01-1~deb12u1 (bookworm) |
| debian | nvidia-graphics-drivers-tesla | < nvidia-graphics-drivers 535.183.01-1~deb12u1 (bookworm) | nvidia-graphics-drivers 535.183.01-1~deb12u1 (bookworm) |
| debian | nvidia-graphics-drivers-tesla-418 | < nvidia-graphics-drivers 535.183.01-1~deb12u1 (bookworm) | nvidia-graphics-drivers 535.183.01-1~deb12u1 (bookworm) |
| debian | nvidia-graphics-drivers-tesla-450 | < nvidia-graphics-drivers 535.183.01-1~deb12u1 (bookworm) | nvidia-graphics-drivers 535.183.01-1~deb12u1 (bookworm) |
| debian | nvidia-graphics-drivers-tesla-460 | < nvidia-graphics-drivers 535.183.01-1~deb12u1 (bookworm) | nvidia-graphics-drivers 535.183.01-1~deb12u1 (bookworm) |
| debian | nvidia-graphics-drivers-tesla-470 | < nvidia-graphics-drivers 535.183.01-1~deb12u1 (bookworm) | nvidia-graphics-drivers 535.183.01-1~deb12u1 (bookworm) |
| debian | nvidia-open-gpu-kernel-modules | < nvidia-graphics-drivers 535.183.01-1~deb12u1 (bookworm) | nvidia-graphics-drivers 535.183.01-1~deb12u1 (bookworm) |
| nvidia | cloud_gaming | < 555.99 | 555.99 |
| nvidia | cloud_gaming | < 555.52.04 | 555.52.04 |
| nvidia | gpu_display_driver | >= 470 < 475.06 | 475.06 |
| nvidia | gpu_display_driver | >= 470 < 470.256.02 | 470.256.02 |
| nvidia | gpu_display_driver | >= 535 < 538.67 | 538.67 |
| nvidia | gpu_display_driver | >= 535 < 535.180.01 | 535.180.01 |
| nvidia | gpu_display_driver | >= 550 < 552.55 | 552.55 |
| nvidia | gpu_display_driver | >= 550 < 550.90.07 | 550.90.07 |
| nvidia | gpu_display_driver | >= 555 < 555.99 | 555.99 |
| nvidia | gpu_display_driver | >= 555 < 555.52.04 | 555.52.04 |
| nvidia | virtual_gpu | < 13.11 | 13.11 |
| nvidia | virtual_gpu | < 17.2 | 17.2 |
| nvidia | virtual_gpu | >= 14.0 < 16.6 | 16.6 |
| nvidia | virtual_gpu | >= 17.0 < 17.2 | 17.2 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2024-0090: NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write
osv·2024-06-13·CVSS 7.8
CVE-2024-0090 [HIGH] CVE-2024-0090: NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write
NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Debian
CVE-2024-0090: nvidia-graphics-drivers - NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user ca...
vendor_debian·2024·CVSS 7.8
CVE-2024-0090 [HIGH] CVE-2024-0090: nvidia-graphics-drivers - NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user ca...
NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Scope: local
bookworm: resolved (fixed in 535.183.01-1~deb12u1)
bullseye: resolved (fixed in 470.256.02-1)
forky: resolved (fixed in 535.183.01-1)
sid: resolved (fixed in 535.183.01-1)
trixie: resolved (fixed in 535.183.01-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-06-13
Published