CVE-2022-42262

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@nvidia.com

Published

2022-12-30

Last modified

2025-04-11

Weaknesses

CWE-120, CWE-787

Affected products

• Cloud Gaming (Nvidia)
• Gpu Display Driver (Nvidia)
• Nvidia Cloud Gaming Virtual Gpu Manager (Nvidia)
• Vgpu Software Virtual Gpu Manager (Nvidia)
• Virtual Gpu (Nvidia)

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/5415