CVE-2024-0119 HIGH

CVE-2024-0119

Vendor Nvidia
Product GPU, vGPU, and Cloud Gaming
Weakness CWE-125
Published October 26, 2024
Last update November 1, 2024

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Key dates

02Disclosure timeline

October 26, 2024 CVE published
November 1, 2024 Record updated