
CVE-2024-0085
https://notcve.org/view.php?id=CVE-2024-0085
13 Jun 2024 — NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A successful exploit of this vulnerability might lead to data tampering, escalation of privileges, and denial of service. El software NVIDIA vGPU para Windows y Linux contiene una vulnerabilidad por la que usuarios sin privilegios podrían ejecutar operaciones privilegiadas en el host. Una explotación exitosa de esta vulnerabilidad podría provocar manipulación de datos... • https://nvidia.custhelp.com/app/answers/detail/a_id/5551 • CWE-266: Incorrect Privilege Assignment •

CVE-2024-0084
https://notcve.org/view.php?id=CVE-2024-0084
13 Jun 2024 — NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could execute privileged operations. A successful exploit of this vulnerability might lead to information disclosure, data tampering, escalation of privileges, and denial of service. El software NVIDIA vGPU para Linux contiene una vulnerabilidad en Virtual GPU Manager, donde el sistema operativo invitado podría ejecutar operaciones privilegiadas. Una explotación exitosa de esta vulnerabilidad podría conduc... • https://nvidia.custhelp.com/app/answers/detail/a_id/5551 • CWE-250: Execution with Unnecessary Privileges •

CVE-2024-0092
https://notcve.org/view.php?id=CVE-2024-0092
13 Jun 2024 — NVIDIA GPU Driver for Windows and Linux contains a vulnerability where an improper check or improper handling of exception conditions might lead to denial of service. El controlador NVIDIA GPU para Windows y Linux contiene una vulnerabilidad en la que una verificación incorrecta o un manejo inadecuado de las condiciones de excepción podrían provocar una denegación de servicio. • https://nvidia.custhelp.com/app/answers/detail/a_id/5551 • CWE-703: Improper Check or Handling of Exceptional Conditions •

CVE-2024-0093
https://notcve.org/view.php?id=CVE-2024-0093
13 Jun 2024 — NVIDIA GPU software for Linux contains a vulnerability where it can expose sensitive information to an actor that is not explicitly authorized to have access to that information. A successful exploit of this vulnerability might lead to information disclosure. El software NVIDIA GPU para Linux contiene una vulnerabilidad que puede exponer información confidencial a un actor que no está autorizado explícitamente para tener acceso a esa información. Una explotación exitosa de esta vulnerabilidad podría dar lug... • https://nvidia.custhelp.com/app/answers/detail/a_id/5551 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVE-2024-0091
https://notcve.org/view.php?id=CVE-2024-0091
13 Jun 2024 — NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering. El controlador de pantalla GPU NVIDIA para Windows y Linux contiene una vulnerabilidad en la que un usuario puede provocar una desreferencia de un puntero que no es de confianza ejecutando una API del controlador. Una explotación exitos... • https://nvidia.custhelp.com/app/answers/detail/a_id/5551 • CWE-822: Untrusted Pointer Dereference •

CVE-2024-0089
https://notcve.org/view.php?id=CVE-2024-0089
13 Jun 2024 — NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed. A successful exploit of this vulnerability might lead to code execution, information disclosure, or data tampering. NVIDIA GPU Display Driver para Windows contiene una vulnerabilidad en la que se podría revelar información de un cliente anterior u otro proceso. Una explotación exitosa de esta vulnerabilidad podría provocar la ejecución de código, la divulgación d... • https://nvidia.custhelp.com/app/answers/detail/a_id/5551 • CWE-665: Improper Initialization •

CVE-2024-0090
https://notcve.org/view.php?id=CVE-2024-0090
13 Jun 2024 — NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. El controlador de GPU NVIDIA para Windows y Linux contiene una vulnerabilidad en la que un usuario puede provocar una escritura fuera de los límites. Una explotación exitosa de esta vulnerabilidad podría provocar la ejecución de código, d... • https://nvidia.custhelp.com/app/answers/detail/a_id/5551 • CWE-787: Out-of-bounds Write •

CVE-2023-25515 – Gentoo Linux Security Advisory 202405-28
https://notcve.org/view.php?id=CVE-2023-25515
23 Jun 2023 — NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure. Multiple vulnerabilities have been discovered in NVIDIA Drivers, the worst of which could result in root privilege escalation. Versions greater than or equal to 470.223.02 are affected. • https://https://nvidia.custhelp.com/app/answers/detail/a_id/5468 • CWE-822: Untrusted Pointer Dereference •

CVE-2022-34680 – Gentoo Linux Security Advisory 202310-02
https://notcve.org/view.php?id=CVE-2022-34680
30 Dec 2022 — NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an integer truncation can lead to an out-of-bounds read, which may lead to denial of service. NVIDIA GPU Display Driver para Linux contiene una vulnerabilidad en el controlador de capa del modo kernel, donde un truncamiento de números enteros puede provocar una lectura fuera de los límites, lo que puede provocar una Denegación de Servicio (DoS). Multiple vulnerabilities have been discovered in NVIDIA Drivers... • https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html • CWE-197: Numeric Truncation Error CWE-681: Incorrect Conversion between Numeric Types •

CVE-2022-42254 – Gentoo Linux Security Advisory 202310-02
https://notcve.org/view.php?id=CVE-2022-42254
30 Dec 2022 — NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, data tampering, or information disclosure. NVIDIA GPU Display Driver para Linux contiene una vulnerabilidad en la capa del modo kernel (nvidia.ko), donde un acceso a la matriz fuera de los límites puede provocar Denegación de Servicio (DoS), manipulación de datos o divulgación de información. Multiple vulnerabilities have been discovered in NVI... • https://nvidia.custhelp.com/app/answers/detail/a_id/5415 • CWE-125: Out-of-bounds Read CWE-129: Improper Validation of Array Index •