CVE-2024-0128 - NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager that allows a user of the guest OS to access global resources

Back Back to CVE browser

HIGH

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager that allows a user of the guest OS to access global resources

Published Oct 26, 2024

7.1

HIGH

CVSS 3.1

EPSS 0.17%

Description

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager that allows a user of the guest OS to access global resources. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges.

Affected products

Vendor NVIDIA Product vGPU and Cloud Gaming Default
unaffected
Affected
- All versions prior to 17.4, 16.8, and the October 2024 release

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
NVIDIA	vGPU and Cloud Gaming	unaffected	Affected All versions prior to 17.4, 16.8, and the October 2024 release

Vendor NVIDIA Product Cloud Gaming Virtual Gpu Default
unaffected
Affected
- ≥ 0, < 565.57.01
Vendor NVIDIA Product Virtual Gpu Manager Default
unaffected
Affected
- ≥ 0, < 16.8
- ≥ 17.0, < 17.4