Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2024-0107
CVE-2024-0107:
NVIDIA Graphics Driver vulnerability analysis and mitigation
Overview
NVIDIA GPU Display Driver for Windows was found to contain a vulnerability (CVE-2024-0107) in its user mode layer. The vulnerability was disclosed in July 2024 and affects multiple NVIDIA driver versions across different product lines including GeForce, NVIDIA RTX/Quadro, NVS, and Tesla Windows drivers. This security issue allows an unprivileged regular user to cause an out-of-bounds read in the system (NVIDIA Bulletin).
Technical details
The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (High severity) with the vector string AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. It is classified as CWE-125, which is an out-of-bounds read vulnerability. The technical assessment indicates that the vulnerability exists in the user mode layer of the NVIDIA GPU Display Driver for Windows (NVIDIA Bulletin).
Impact
A successful exploitation of this vulnerability can lead to multiple severe consequences including code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The high CVSS score reflects the significant potential impact on affected systems (NVIDIA Bulletin, CVE Details).
Mitigation and workarounds
NVIDIA has released security updates to address this vulnerability across multiple driver branches. For GeForce products, users should update to version 556.12 for R555 branch, 475.14 for R470 branch. For NVIDIA RTX/Quadro, NVS, and Tesla products, updates are available as versions 552.74 (R550 branch), 538.78 (R535 branch), and 475.14 (R470 branch). Additionally, updates have been released for vGPU Software and Cloud Gaming components (NVIDIA Bulletin).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management