CVE-2023-0195 LOW

CVE-2023-0195

Vendor Nvidia
Product vGPU software (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Windows)
Weakness CWE-1284
Published April 1, 2023
Last update February 13, 2025

CVSS base score

2.0/10
Attack vector Physical
Attack complexity High
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an can cause CWE-1284, which may lead to hypothetical Information leak of unimportant data such as local variable data of the driver

Key dates

02Disclosure timeline

April 1, 2023 CVE published
February 13, 2025 Record updated