CVE-2022-28181: nvidia gpu_display_driver Out-of-bounds Write
Vulnerability summary
CVE-2022-28181 is a critical (CVSS 9.9) Out-of-bounds Write vulnerability in nvidia gpu_display_driver. EPSS estimates a 1.13% chance of exploitation in the next 30 days, higher than 65.9% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 17-05-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components.
CVSS metrics
5 scores · 4 sources · 2 versions- CVE.orgCNA8.5HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated9.9CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.9CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS trend
Probability
1.13%
Chance of exploitation in the next 30 days
Percentile
66%
Versus all other CVEs
30-day change
+0.04 pp
From 1.09% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu18 products
- nvidia-graphics-drivers-304All versions (No fix recorded)
- nvidia-graphics-drivers-340All versions (No fix recorded)
- nvidia-graphics-drivers-384All versions (No fix recorded)
- nvidia-graphics-drivers-390< 390.151-0ubuntu0.18.04.1 | < 390.151-0ubuntu0.20.04.1 | < 390.151-0ubuntu0.22.04.1
- nvidia-graphics-drivers-418-serverAll versions (No fix recorded)
Nvidia3 products
- gpu_display_driverna
- nvidia gpu display driverAll GPU Driver versions for Windows and Linux
- virtual_gpu≥ 11.0, < 11.8 | ≥ 13.0, < 13.3 | 14.0
Debian2 products
- nvidia-graphics-drivers< 470.129.06-1
- nvidia-graphics-drivers-tesla-470< 470.129.06-1
3 vendors · 23 products
