HIGH🇵🇱 Wersja polska

CVE-2024-0091

CVSS 7.8v3.1pub. 2024-06-13upd. 2024-11-21

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • Canonical Ubuntu

    OS
    Canonical
    all versions
  • Citrix Hypervisor

    OS
    Citrix
    all versions
  • Linux Kernel

    OS
    Linux
    all versions
  • Microsoft Azure Stack Hci

    APP
    Microsoft
    all versions
  • Microsoft Windows

    OS
    Microsoft
    all versions
  • Nvidia Cloud Gaming

    APP
    Nvidia
    < 555.52.04< 555.99
  • Nvidia Geforce

    APP
    Nvidia
    all versions
  • Nvidia Gpu Display Driver

    APP
    Nvidia
    550 – 552.55 (excl.)555 – 555.99 (excl.)550 – 550.90.07 (excl.)555 – 555.52.04 (excl.)
  • Nvidia Nvs

    APP
    Nvidia
    all versions
  • Nvidia Quadro

    APP
    Nvidia
    all versions
  • Nvidia Rtx

    APP
    Nvidia
    all versions
  • Nvidia Studio

    APP
    Nvidia
    all versions
  • Nvidia Tesla

    APP
    Nvidia
    all versions
  • Nvidia Virtual Gpu

    APP
    Nvidia
    17.0 – 17.2 (excl.)14.0 – 16.6 (excl.)< 13.11< 17.2
  • Red Hat Enterprise Linux Kernel Based Virtual Machine

    OS
    Redhat
    all versions
  • VMware vSphere

    OS
    Vmware
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2026-8398CRITICAL9.3⚠ KEVPL ✓same product

Atak na łańcuch dostaw DAEMON Tools Lite — trojanizacja instalatorów

CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓same product

Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓same product

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2025-34028CRITICAL9.3⚠ KEVPL ✓same product

Commvault Command Center – nieuwierzytelniony RCE przez path traversal w ZIP

CVE-2024-7262CRITICAL9.3⚠ KEVPL ✓same product

Path Traversal w Kingsoft WPS Office — ładowanie dowolnej biblioteki Windows