CVE-2024-0091

published 2024-06-13

CVE-2024-0091: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A…

Priority P3 37 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
debian	nvidia-graphics-drivers	—	—
debian	nvidia-open-gpu-kernel-modules	—	—
nvidia	cloud_gaming	< 555.99	555.99
nvidia	cloud_gaming	< 555.52.04	555.52.04
nvidia	gpu_display_driver	>= 550 < 552.55	552.55
nvidia	gpu_display_driver	>= 550 < 550.90.07	550.90.07
nvidia	gpu_display_driver	>= 555 < 555.99	555.99
nvidia	gpu_display_driver	>= 555 < 555.52.04	555.52.04
nvidia	virtual_gpu	< 13.11	13.11
nvidia	virtual_gpu	< 17.2	17.2
nvidia	virtual_gpu	>= 14.0 < 16.6	16.6
nvidia	virtual_gpu	>= 17.0 < 17.2	17.2

CVSS provenance

nvd v3.1 7.8 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

osv 7.8 HIGH

vendor_debian 7.8 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-822