CVE-2022-42262: Buffer Overflow
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-42262?
CVE-2022-42262 is a vulnerability in the NVIDIA vGPU software Virtual GPU Manager (vGPU plugin) that can lead to buffer overrun, data tampering, information disclosure, or denial of service.
Which software is affected by CVE-2022-42262?
NVIDIA Virtual GPU software versions 11.11 to 13.6 and 14.0 to 14.4 are affected by CVE-2022-42262.
What is the severity of CVE-2022-42262?
The severity of CVE-2022-42262 is high (CVSS score 7.8).
How can CVE-2022-42262 be exploited?
CVE-2022-42262 can be exploited by sending specially crafted input to the Virtual GPU Manager, causing a buffer overrun.
Is there a fix available for CVE-2022-42262?
Yes, NVIDIA has released a fix for CVE-2022-42262. It is recommended to update to the latest version of the NVIDIA vGPU software.