CVE-2023-0199 - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds write can lead to denial of service and data tampering

Back Back to CVE browser

MEDIUM

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds write can lead to denial of service and data tampering

Published Apr 22, 2023

6.1

MEDIUM

CVSS 3.1

EPSS 0.23%

Description

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds write can lead to denial of service and data tampering.

Affected products

Vendor NVIDIA Product NVIDIA GPU Display Driver Default
unaffected
- Version
  All versions prior to and including 15.1, 13.6, 11.11, and all versions prior to and including February 2023 release
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

NVIDIA

NVIDIA GPU Display Driver

unaffected

Version	Status	Constraints
All versions prior to and including 15.1, 13.6, 11.11, and all versions prior to and including February 2023 release	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-12288
Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5452
Vendor Advisory
https://security.gentoo.org/glsa/202310-02
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-12288		Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5452		Vendor Advisory
https://security.gentoo.org/glsa/202310-02		Third Party Advisory