CVE-2023-0195: Low severity nvidia virtual gpu graphics driver vulnerability
Published Apr 1, 2023
·Updated
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an can cause CWE-1284, which may lead to hypothetical Information leak of unimportant data such as local variable data of the driver
Affected Software
4 affected components
Nvidia Virtual GPU<11.12
Nvidia Virtual GPU>=13.0<13.7
Nvidia Virtual GPU>=15.0<15.2
Microsoft Windows
Event History
Apr 1, 2023
CVE Published
via MITRE·04:55 AM
Data Sourced
via MITRE·04:55 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this NVIDIA GPU Display Driver for Windows vulnerability?
The vulnerability ID is CVE-2023-0195.
2
What is the severity of CVE-2023-0195?
The severity of CVE-2023-0195 is low.
3
What is CWE-1284?
CWE-1284 is a Common Weakness Enumeration category for information leak vulnerabilities.
4
Are all versions of Nvidia Virtual Gpu affected by CVE-2023-0195?
No, only Nvidia Virtual Gpu versions up to 11.12 are affected.
5
How can I fix this vulnerability?
To fix this vulnerability, update your Nvidia Virtual Gpu driver to a version higher than 11.12.