CVE-2022-31610
NVIDIA Graphics Driver vulnerability analysis and mitigation

Overview

CVE-2022-31610 is a high-severity vulnerability discovered in the NVIDIA GPU Display Driver for Windows, specifically in the kernel mode layer (nvlddmkm.sys). The vulnerability was disclosed in August 2022 and affects multiple NVIDIA driver branches including R515, R510, R470, and R450. This security flaw impacts various NVIDIA products including GeForce, Studio, NVIDIA RTX/Quadro, NVS, and Tesla graphics drivers for Windows operating systems (NVIDIA Bulletin).

Technical details

The vulnerability is characterized by an out-of-bounds write condition in the kernel mode layer of the Windows display driver. It received a CVSS v3.1 base score of 7.8 with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating its high severity. The vulnerability requires local access and basic user capabilities to exploit (NVIDIA Bulletin).

Impact

If successfully exploited, this vulnerability can lead to multiple severe consequences including code execution, denial of service, escalation of privileges, information disclosure, or data tampering. The vulnerability affects systems running various versions of NVIDIA's Windows display drivers prior to the security updates (NVIDIA Bulletin, Decipher).

Mitigation and workarounds

NVIDIA has released security updates to address this vulnerability. For Windows systems, the fixed versions are: R515 branch - version 516.94, R510 branch - version 513.46, R470 branch - version 473.81, and R450 branch - version 453.64. Users are recommended to update their drivers to these versions or later through the NVIDIA Driver Downloads page (NVIDIA Bulletin).

Additional resources


SourceThis report was generated using AI

Related NVIDIA Graphics Driver vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-23309HIGH8.2
  • NVIDIA Graphics DriverNVIDIA Graphics Driver
  • cpe:2.3:a:nvidia:gpu_driver
NoYesOct 10, 2025
CVE-2025-23347HIGH7.8
  • NVIDIA Graphics DriverNVIDIA Graphics Driver
  • cpe:2.3:a:nvidia:gpu_driver
NoYesOct 10, 2025
CVE-2025-23282HIGH7
  • NVIDIA Graphics DriverNVIDIA Graphics Driver
  • virt:rhel::qemu-guest-agent
NoYesOct 10, 2025
CVE-2025-23280HIGH7
  • NVIDIA Graphics DriverNVIDIA Graphics Driver
  • nvidia-graphics-drivers-tesla-450
NoYesOct 10, 2025
CVE-2025-23345MEDIUM4.4
  • NVIDIA Graphics DriverNVIDIA Graphics Driver
  • cpe:2.3:a:nvidia:gpu_driver
NoYesOct 10, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management