CVE-2022-31610

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds write, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5383	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:nvidia:gpu_display_driver::::::windows::*
	cpe:2.3:a:nvidia:gpu_display_driver::::::windows::*

cpe:2.3:h:nvidia:geforce:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

OR	cpe:2.3:a:nvidia:virtual_gpu::::::::
	cpe:2.3:a:nvidia:virtual_gpu::::::::
	cpe:2.3:a:nvidia:virtual_gpu:14.0:::::::*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:a:nvidia:cloud_gaming_guest:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*

cpe:2.3:a:nvidia:studio:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

OR	cpe:2.3:a:nvidia:gpu_display_driver::::::windows::*
	cpe:2.3:a:nvidia:gpu_display_driver::::::windows::*
	cpe:2.3:a:nvidia:gpu_display_driver::::::windows::*

cpe:2.3:a:nvidia:studio:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

OR	cpe:2.3:a:nvidia:gpu_display_driver::::::windows::*
	cpe:2.3:a:nvidia:gpu_display_driver::::::windows::*
	cpe:2.3:a:nvidia:gpu_display_driver::::::windows::*
	cpe:2.3:a:nvidia:gpu_display_driver::::::windows::*

cpe:2.3:h:nvidia:tesla:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2022-11-19 00:15

Updated : 2022-11-29 15:42

NVD link : CVE-2022-31610

Mitre link : CVE-2022-31610

CVE.ORG link : CVE-2022-31610

JSON object : View

Products Affected

nvidia

studio
gpu_display_driver
cloud_gaming_guest
virtual_gpu
geforce
tesla

microsoft

windows

CWE

CWE-787

Out-of-bounds Write

{"id": "CVE-2022-31610", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "psirt@nvidia.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2022-11-19T00:15:25.477", "references": [{"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5383", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@nvidia.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}, {"type": "Secondary", "source": "psirt@nvidia.com", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds write, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering."}, {"lang": "es", "value": "NVIDIA GPU Display Driver para Windows contiene una vulnerabilidad en la capa del modo kernel (nvlddmkm.sys), donde un usuario local con capacidades b\u00e1sicas puede provocar una escritura fuera de los l\u00edmites, lo que puede provocar la ejecuci\u00f3n de c\u00f3digo, Denegaci\u00f3n de Servicio (DoS) y escalada de privilegios, divulgaci\u00f3n de informaci\u00f3n o manipulaci\u00f3n de datos."}], "lastModified": "2022-11-29T15:42:40.983", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "9E31C0C2-5C06-4E5E-9106-1ABE98D37C13", "versionEndExcluding": "473.81", "versionStartIncluding": "471.11"}, {"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "337FAC23-CA17-4B2C-AFC0-F3FD8493FACD", "versionEndExcluding": "516.94", "versionStartIncluding": "516.25"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:nvidia:geforce:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6B30520A-D378-4CC8-812D-3B443740D6E3"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45F338C5-245D-4D10-9B48-B56B7094F167", "versionEndExcluding": "11.8", "versionStartIncluding": "11.0"}, {"criteria": "cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "98C8F13F-2F8F-4BAE-B971-582084B93D58", "versionEndExcluding": "13.3", "versionStartIncluding": "13.0"}, {"criteria": "cpe:2.3:a:nvidia:virtual_gpu:14.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3CB2F728-3BFD-418D-AC29-A4165D1E7CA6"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:cloud_gaming_guest:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D619D0D6-04FF-4C1E-84BC-BF44C3328451", "versionEndExcluding": "516.94"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "337FAC23-CA17-4B2C-AFC0-F3FD8493FACD", "versionEndExcluding": "516.94", "versionStartIncluding": "516.25"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:studio:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C1ED5DE2-7677-4F38-8177-3BF0B3D03A09"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "9E31C0C2-5C06-4E5E-9106-1ABE98D37C13", "versionEndExcluding": "473.81", "versionStartIncluding": "471.11"}, {"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "094B9003-EEC7-46DD-AEC2-F2BCB0F8DE88", "versionEndExcluding": "513.46", "versionStartIncluding": "511.09"}, {"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "337FAC23-CA17-4B2C-AFC0-F3FD8493FACD", "versionEndExcluding": "516.94", "versionStartIncluding": "516.25"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:studio:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C1ED5DE2-7677-4F38-8177-3BF0B3D03A09"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "CE6F7210-C895-478D-8155-85335EFEAE4F", "versionEndExcluding": "453.64", "versionStartIncluding": "451.48"}, {"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "D66D8563-40B2-4B35-BC8B-C2905C9D4FC8", "versionEndExcluding": "472.81", "versionStartIncluding": "471.11"}, {"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "094B9003-EEC7-46DD-AEC2-F2BCB0F8DE88", "versionEndExcluding": "513.46", "versionStartIncluding": "511.09"}, {"criteria": "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "337FAC23-CA17-4B2C-AFC0-F3FD8493FACD", "versionEndExcluding": "516.94", "versionStartIncluding": "516.25"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:nvidia:tesla:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "75C6DE26-88F2-428E-B761-754BD027E015"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@nvidia.com"}