NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs, where an attacker with local unprivileged system access may cause a NULL pointer dereference, which may lead to denial of service in a component beyond the vulnerable component.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gpu_display_driver | Nvidia | 390 (including) | 392.68 (excluding) |
| Gpu_display_driver | Nvidia | 460 (including) | 463.15 (excluding) |
| Gpu_display_driver | Nvidia | 470 (including) | 472.39 (excluding) |
| Gpu_display_driver | Nvidia | 490 (including) | 496.49 (excluding) |