CVE-2022-28182
First published: Tue May 17 2022(Updated: )
NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where an unauthorized attacker on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution to cause denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components.
Credit: psirt@nvidia.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nvidia Gpu Display Driver | ||
| NVIDIA Virtual GPU | >=11.0<11.8 | |
| NVIDIA Virtual GPU | >=13.0<13.3 | |
| NVIDIA Virtual GPU | =14.0 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-28182?
CVE-2022-28182 is a vulnerability in the NVIDIA GPU Display Driver for Windows, specifically in the DirectX11 user mode driver (nvwgf2um/x.dll).
What is the severity of CVE-2022-28182?
The severity of CVE-2022-28182 is high, with a CVSS score of 8.5.
How does CVE-2022-28182 impact the affected software?
CVE-2022-28182 allows an unauthorized attacker on the network to cause an out-of-bounds write in the NVIDIA GPU Display Driver, potentially leading to code execution, denial of service, or escalation of privileges.
Which software versions are affected by CVE-2022-28182?
NVIDIA GPU Display Driver for Windows versions, NVIDIA Virtual GPU versions 11.0 to 11.8 and 13.0 to 13.3, and NVIDIA Virtual GPU version 14.0 are affected by CVE-2022-28182.
How can I fix CVE-2022-28182?
To mitigate CVE-2022-28182, it is recommended to update to the latest version of the NVIDIA GPU Display Driver for Windows and NVIDIA Virtual GPU.
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/nvidia
- canonical/nvidia gpu display driver
- canonical/nvidia virtual gpu
- version/nvidia virtual gpu/11.0
- version/nvidia virtual gpu/13.0
- version/nvidia virtual gpu/14.0
- vendor/microsoft
- canonical/microsoft windows