CVE-2022-31616: Input Validation
First published: Fri Nov 18 2022(Updated: )
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic capabilities can cause an out-of-bounds read, which may lead to denial of service, or information disclosure.
Credit: psirt@nvidia.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nvidia Gpu Display Driver | >=471.11<473.81 | |
| Nvidia Gpu Display Driver | >=516.25<516.94 | |
| Nvidia Geforce | ||
| NVIDIA Virtual GPU | >=11.0<11.8 | |
| NVIDIA Virtual GPU | >=13.0<13.3 | |
| NVIDIA Virtual GPU | =14.0 | |
| Microsoft Windows | ||
| Nvidia Cloud Gaming Guest | <516.94 | |
| Nvidia Studio | ||
| Nvidia Gpu Display Driver | >=511.09<513.46 | |
| Nvidia Gpu Display Driver | >=451.48<453.64 | |
| Nvidia Gpu Display Driver | >=471.11<472.81 | |
| Nvidia Tesla |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-31616?
CVE-2022-31616 is a vulnerability in the NVIDIA GPU Display Driver for Windows, which can allow a local user to cause denial of service or information disclosure.
Which software versions are affected by CVE-2022-31616?
The affected software versions are between 471.11 and 473.81 for NVIDIA GPU Display Driver for Windows.
How severe is CVE-2022-31616?
CVE-2022-31616 has a severity level of 7.1 (high).
How can I fix CVE-2022-31616?
To fix CVE-2022-31616, update the NVIDIA GPU Display Driver for Windows to a version outside the affected range.
Where can I find more information about CVE-2022-31616?
You can find more information about CVE-2022-31616 on the NVIDIA customer help website.
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/nvidia
- canonical/nvidia gpu display driver
- version/nvidia gpu display driver/471.11
- version/nvidia gpu display driver/516.25
- canonical/nvidia geforce
- canonical/nvidia virtual gpu
- version/nvidia virtual gpu/11.0
- version/nvidia virtual gpu/13.0
- version/nvidia virtual gpu/14.0
- vendor/microsoft
- canonical/microsoft windows
- canonical/nvidia cloud gaming guest
- canonical/nvidia studio
- version/nvidia gpu display driver/511.09
- version/nvidia gpu display driver/451.48
- canonical/nvidia tesla