Vulnerabilities > Nvidia

DATE CVE VULNERABILITY TITLE RISK
2023-01-11 CVE-2022-42271 Classic Buffer Overflow vulnerability in Nvidia DGX A100 Firmware
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution
local
low complexity
nvidia CWE-120
7.8
2022-12-30 CVE-2022-34669 Externally Controlled Reference to a Resource in Another Sphere vulnerability in Nvidia Cloud Gaming and Virtual GPU
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can access or modify system files or other files that are critical to the application, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.
local
low complexity
nvidia CWE-610
7.8
2022-12-30 CVE-2022-34670 Incorrect Conversion between Numeric Types vulnerability in multiple products
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive of smaller size causes data to be lost in the conversion, which may lead to denial of service or information disclosure.
local
low complexity
nvidia debian CWE-681
7.8
2022-12-30 CVE-2022-34671 Out-of-bounds Write vulnerability in Nvidia GPU Display Driver
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can cause an out-of-bounds write, which may lead to code execution, information disclosure, and denial of service.
network
low complexity
nvidia CWE-787
8.8
2022-12-30 CVE-2022-34672 Unspecified vulnerability in Nvidia Cloud Gaming and Virtual GPU
NVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an unprivileged regular user can compromise the security of the software by gaining privileges, reading sensitive information, or executing commands.
local
low complexity
nvidia
7.8
2022-12-30 CVE-2022-34673 Out-of-bounds Read vulnerability in Nvidia GPU Display Driver 515
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, information disclosure, or data tampering.
local
low complexity
nvidia CWE-125
7.3
2022-12-30 CVE-2022-34674 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where a helper function maps more physical pages than were requested, which may lead to undefined behavior or an information leak.
local
low complexity
nvidia debian
6.1
2022-12-30 CVE-2022-34675 NULL Pointer Dereference vulnerability in Nvidia Cloud Gaming and GPU Display Driver
NVIDIA Display Driver for Linux contains a vulnerability in the Virtual GPU Manager, where it does not check the return value from a null-pointer dereference, which may lead to denial of service.
local
low complexity
nvidia CWE-476
5.5
2022-12-30 CVE-2022-34676 Out-of-bounds Read vulnerability in Nvidia Cloud Gaming and Virtual GPU
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denial of service, information disclosure, or data tampering.
local
low complexity
nvidia CWE-125
7.8
2022-12-30 CVE-2022-34677 Incorrect Conversion between Numeric Types vulnerability in multiple products
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause an integer to be truncated, which may lead to denial of service or data tampering.
local
low complexity
nvidia debian CWE-681
7.1