CVE-2023-31019

NVIDIA GPU Display Driver for Windows contains a vulnerability in wksServicePlugin.dll, where the driver implementation does not restrict or incorrectly restricts access from the named pipe server to a connecting client, which may lead to potential impersonation to the client's secure context.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@nvidia.com

Published

2023-11-02

Last modified

2024-09-12

Weaknesses

CWE-284

Affected products

• And Cloud Gaming Driver (Nvidia)
• Gpu Display Driver (Nvidia)
• Nvidia Gpu Display Driver (Nvidia)
• Vgpu Driver (Nvidia)
• Virtual Gpu (Nvidia)

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/5491