CVE-2022-28182: nvidia gpu_display_driver Out-of-bounds Write
Vulnerability summary
CVE-2022-28182 is a high (CVSS 8.5) Out-of-bounds Write vulnerability in nvidia gpu_display_driver. EPSS estimates a 1.63% chance of exploitation in the next 30 days, higher than 75.8% of scored vulnerabilities.
Timeline
- 17-05-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where an unauthorized attacker on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution to cause denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated8.5HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
- NVDNIST8.5HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS trend
Probability
1.63%
Chance of exploitation in the next 30 days
Percentile
76%
Versus all other CVEs
30-day change
+0.05 pp
From 1.58% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu8 products
- nvidia-graphics-drivers-304All versions (No fix recorded)
- nvidia-graphics-drivers-340All versions (No fix recorded)
- nvidia-graphics-drivers-384All versions (No fix recorded)
- nvidia-graphics-drivers-430All versions (No fix recorded)
- nvidia-graphics-drivers-435All versions (No fix recorded)
Nvidia3 products
- gpu_display_driverna
- nvidia gpu display driverAll GPU Driver versions for Windows
- virtual_gpu≥ 11.0, < 11.8 | ≥ 13.0, < 13.3 | 14.0
2 vendors · 11 products