CVE-2022-34671

CVSS V2 None CVSS V3 None
Description
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds write, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.
Overview
  • CVE ID
  • CVE-2022-34671
  • Assigner
  • psirt@nvidia.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-12-30T23:15:09
  • Last Modified Date
  • 2023-01-11T20:17:03
Weakness Enumerations
CWE URL
CWE-787 http://cwe.mitre.org/data/definitions/787.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:* 1 OR 470 474.14
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:* 1 OR 510 514.08
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:* 1 OR 515 517.88
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:* 1 OR 525 527.27
cpe:2.3:a:nvidia:nvs:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:a:nvidia:quadro:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:a:nvidia:rtx:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:* 1 OR 450 454.02
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:* 1 OR 470 474.14
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:* 1 OR 510 514.08
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:* 1 OR 515 517.88
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:* 1 OR 525 527.41
cpe:2.3:a:nvidia:tesla:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:* 1 OR 525 526.98
cpe:2.3:a:nvidia:studio:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:* 1 OR 470 474.14
cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:* 1 OR 525 526.98
cpe:2.3:a:nvidia:geforce:-:*:*:*:*:*:*:* 0 OR
References
Reference URL Reference Tags
https://nvidia.custhelp.com/app/answers/detail/a_id/5415
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-34671
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34671
History
Created Old Value New Value Data Type Notes
2022-12-31 00:17:23 Added to TrackCVE
2022-12-31 00:17:24 Weakness Enumeration new
2022-12-31 04:17:43 2022-12-31T03:26:56 CVE Modified Date updated
2022-12-31 04:17:43 Received Awaiting Analysis Vulnerability Status updated
2023-01-05 16:20:23 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-01-12 05:15:35 2023-01-11T20:17:03 CVE Modified Date updated
2023-01-12 05:15:35 Undergoing Analysis Analyzed Vulnerability Status updated
2023-01-12 05:15:37 CPE Information updated