CVEvulnerability
CVE-2022-28188
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-05-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-20
Description
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where the product receives input or data, but does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly, which may lead to denial of service.
Affected configurations
• nvidia gpu display driver
• nvidia virtual gpu (>= 11.0 < 11.8)
• nvidia virtual gpu (>= 13.0 < 13.3)
• nvidia virtual gpu 14.0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5353 Patch, Vendor Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5353 Patch, Vendor Advisory