CVE-2022-28188: Input Validation

Q: What is CVE-2022-28188?

CVE-2022-28188 is a vulnerability in the NVIDIA GPU Display Driver for Windows.

Q: What is the severity of CVE-2022-28188?

CVE-2022-28188 has a severity rating of medium (5.5).

Q: Which software is affected by CVE-2022-28188?

The NVIDIA GPU Display Driver for Windows, NVIDIA Virtual GPU 11.0 to 11.8, NVIDIA Virtual GPU 13.0 to 13.3, and NVIDIA Virtual GPU 14.0 are affected by CVE-2022-28188.

Q: How does CVE-2022-28188 affect Microsoft Windows?

CVE-2022-28188 does not affect Microsoft Windows.

Q: Is there a fix for CVE-2022-28188?

Please refer to the provided reference for information on how to fix CVE-2022-28188.

Published May 17, 2022

Updated

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where the product receives input or data, but does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly, which may lead to denial of service.

Affected Software

5 affected components

Nvidia Gpu Display Driver Windows

Nvidia Virtual GPU>=11.0<11.8

Nvidia Virtual GPU>=13.0<13.3

Nvidia Virtual GPU=14.0

Microsoft Windows

Remediation

Patch Available

https://nvidia.custhelp.com/app/answers/detail/a_id/5353

Event History

May 17, 2022

CVE Published

via MITRE·07:15 PM

Data Sourced

via MITRE·07:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2022-28188?

CVE-2022-28188 is a vulnerability in the NVIDIA GPU Display Driver for Windows.

What is the severity of CVE-2022-28188?