
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2022-31610 is a high-severity vulnerability discovered in the NVIDIA GPU Display Driver for Windows, specifically in the kernel mode layer (nvlddmkm.sys). The vulnerability was disclosed in August 2022 and affects multiple NVIDIA driver branches including R515, R510, R470, and R450. This security flaw impacts various NVIDIA products including GeForce, Studio, NVIDIA RTX/Quadro, NVS, and Tesla graphics drivers for Windows operating systems (NVIDIA Bulletin).
The vulnerability is characterized by an out-of-bounds write condition in the kernel mode layer of the Windows display driver. It received a CVSS v3.1 base score of 7.8 with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating its high severity. The vulnerability requires local access and basic user capabilities to exploit (NVIDIA Bulletin).
If successfully exploited, this vulnerability can lead to multiple severe consequences including code execution, denial of service, escalation of privileges, information disclosure, or data tampering. The vulnerability affects systems running various versions of NVIDIA's Windows display drivers prior to the security updates (NVIDIA Bulletin, Decipher).
NVIDIA has released security updates to address this vulnerability. For Windows systems, the fixed versions are: R515 branch - version 516.94, R510 branch - version 513.46, R470 branch - version 473.81, and R450 branch - version 453.64. Users are recommended to update their drivers to these versions or later through the NVIDIA Driver Downloads page (NVIDIA Bulletin).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."