NVIDIA GPU Display Driver for Linux version 304 contains a format string vulnerability that could allow a local user to execute arbitrary code, escalate privileges, tamper with data, cause denial of service, or disclose information. The vulnerability affects multiple specific versions of the 304 and 340 driver series on Ubuntu platforms. The CVSS score is 7.8, indicating a medium severity level. No patch or remediation details are provided in the available data.
NVIDIA GPU Display Driver for Linux versions 304.x and 340.x contain a vulnerability in the Virtual GPU Manager (vGPU plugin) that allows a guest VM user to cause an out-of-bounds write by sending a crafted RPC message with invalid performance state list size parameters. This vulnerability can lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure. The CVSS score is 7.3, indicating a medium severity level. No patch or remediation information is provided in the input data.
NVIDIA GPU Display Driver versions 304 for Windows and Linux contain a kernel mode vulnerability involving improper cleanup of reference counts during error paths, leading to a use-after-free condition. Exploitation could result in code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS 3.1 score of 7.8, indicating a medium severity level. Multiple specific Ubuntu package versions of the driver are affected. No patch or remediation information is provided in the input data.
The NVIDIA GPU Display Driver for Linux version 304 contains a kernel mode layer vulnerability allowing a user to cause an out-of-bounds write by supplying mismatched memory buffers during event buffer setup. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability affects multiple specific Ubuntu package versions of the driver. The CVSS 3.1 base score is 7.8, indicating a high impact but requiring local privileges and low attack complexity.
NVIDIA Linux GPU Display Driver version 304 contains a vulnerability in the NGX updater due to an outdated embedded cryptographic library susceptible to type confusion. Exploitation could lead to code execution, denial of service, information disclosure, or data tampering. The vulnerability has a CVSS 3.1 score of 7.8, indicating a medium severity level. Multiple specific Ubuntu package versions of the driver are affected. No patch or remediation details are provided in the available data.
NVIDIA GPU Display Driver for Windows version 304 contains a vulnerability in the kernel-mode color transform path related to excessive kernel stack use when processing YCbCr420 display emulation. Exploitation of this flaw may cause a denial of service condition. The vulnerability has a medium severity rating with a CVSS score of 5.5. No information about available patches or vendor advisories is provided.
NVIDIA GPU Display Driver versions 304 for Windows and Linux contain a kernel mode vulnerability allowing out-of-bounds array access. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS 3.1 score of 7.8, indicating a medium severity level. Multiple specific Ubuntu package versions are affected. No patch or remediation information is provided in the input data.
NVIDIA GPU Display Driver versions 304 for Windows and Linux contain a kernel mode vulnerability involving incorrect numeric type conversion. Exploitation could allow code execution, denial of service, privilege escalation, information disclosure, and data tampering. The CVSS 3.1 base score is 7.8, indicating a medium severity. Multiple specific Ubuntu package versions of these drivers are affected. There is no explicit patch or remediation information provided.
NVIDIA GPU Display Driver for Windows and Linux version 304 contains a kernel mode vulnerability allowing a user to cause an out-of-bounds write. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS 3.1 score of 6.7 (medium severity).
NVIDIA GPU Display Driver versions 304 for Windows and Linux contain a kernel mode vulnerability involving an integer overflow that can lead to an out-of-bounds write to GPU memory. Exploitation could result in code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS 3.1 score of 7.8, indicating a medium severity level. Multiple specific Ubuntu package versions of the driver are affected. No patch or remediation information is provided in the available data.
NVIDIA GPU Display Driver versions 304 for Windows and Linux contain a kernel mode vulnerability that allows a local user to cause an out-of-bounds write. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS 3.1 score of 7.8, indicating a medium severity level. Multiple specific Ubuntu package versions of the driver are affected. No patch or remediation information is provided in the input data.
NVIDIA GPU Display Driver versions 304 for Windows and Linux contain a kernel mode vulnerability that allows a local user to cause an out-of-bounds read. This flaw can lead to kernel information disclosure and potentially enable code execution, denial of service, privilege escalation, information disclosure, and data tampering.
NVIDIA GPU Display Driver versions 304 for Windows and Linux contain a kernel mode vulnerability that allows a user to cause an out-of-bounds read from kernel heap memory. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS 3.1 score of 7.8, indicating a medium severity level. Multiple specific Ubuntu package versions of these drivers are affected. No patch or remediation details are provided in the available data.
NVIDIA GPU Display Driver for Windows and Linux version 304 contains a kernel mode vulnerability that allows a local user to expose kernel stack contents, including sensitive pointers and return addresses. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS 3.1 score of 7.8, indicating a medium severity level.
NVIDIA GPU Display Driver versions 304 for Windows and Linux contain a kernel mode vulnerability involving an out-of-bounds read caused by an unbounded string operation. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS 3.1 base score of 6.7, indicating medium severity. Multiple specific Ubuntu package versions of these drivers are affected. No patch or remediation details are provided in the source data.
NVIDIA GPU Display Driver versions 304 for Windows and Linux contain a use-after-free vulnerability that can be exploited by an unprivileged user. Successful exploitation could lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure. The vulnerability has a CVSS score of 7.8, indicating a medium severity level. Multiple specific Ubuntu package versions of the driver are affected. No patch or remediation information is provided in the data.
NVIDIA GPU Display Driver for Linux version 304 contains a kernel mode driver vulnerability where a local user can cause a null pointer dereference by submitting a crafted ioctl call. This vulnerability can lead to a denial of service condition. The issue affects multiple specific versions of the NVIDIA 304 and 340 driver series on Ubuntu platforms. The vulnerability has a medium severity rating with a CVSS score of 5.5.
NVIDIA GPU Display Driver versions 304 for Windows and Linux contains a vulnerability in a secure microcontroller component. Incorrect permission assignment for a critical resource allows a local attacker with privileged access to modify protected memory. Successful exploitation could lead to code execution and privilege escalation. The vulnerability has a CVSS score of 6.0, indicating medium severity. No information about available patches or vendor advisories is provided.
NVIDIA GPU Display Driver version 304 for Windows and Linux contains a kernel mode vulnerability due to improper input validation. Exploitation could allow an attacker with high privileges to execute code, cause denial of service, escalate privileges, disclose information, or tamper with data. The vulnerability has a CVSS 3.1 score of 6.7, indicating medium severity. Multiple specific driver versions are affected. No patch or remediation information is provided in the input data.
NVIDIA GPU Display Driver versions 304 for Windows and Linux contain a kernel mode vulnerability that allows an attacker to cause an out-of-bounds write. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS 3.1 score of 7.8, indicating a medium severity level. Multiple specific Ubuntu package versions of the driver are affected. No patch or remediation details are provided in the available data.