CVE-2022-31606: nvidia cloud_gaming_guest Out-of-bounds Write
Vulnerability summary
CVE-2022-31606 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in nvidia cloud_gaming_guest. EPSS estimates a 0.39% chance of exploitation in the next 30 days, higher than 31.5% of scored vulnerabilities.
Timeline
- 18-11-2022PublishedVulnerability first disclosed.
- 29-04-2025Last modifiedVulnerability information updated.
Description
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a failure to properly validate data might allow an attacker with basic user capabilities to cause an out-of-bounds access in kernel mode, which could lead to denial of service, information disclosure, escalation of privileges, or data tampering.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.39%
Chance of exploitation in the next 30 days
Percentile
32%
Versus all other CVEs
30-day change
0.00 pp
From 0.39% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu12 products
- nvidia-graphics-drivers-304All versions (No fix recorded)
- nvidia-graphics-drivers-340All versions (No fix recorded)
- nvidia-graphics-drivers-384All versions (No fix recorded)
- nvidia-graphics-drivers-418-serverAll versions (No fix recorded)
- nvidia-graphics-drivers-430All versions (No fix recorded)
Nvidia4 products
- cloud_gaming_guest< 516.94
- gpu_display_driver≥ 471.11, < 473.81 | ≥ 516.25, < 516.94 | ≥ 511.09, < 513.46 | ≥ 451.48, < 453.64 | ≥ 471.11, < 472.81
- nvidia cloud gaming (guest driver)All versions prior to the August 2022 release
- virtual_gpu≥ 11.0, < 11.8 | ≥ 13.0, < 13.3 | 14.0
2 vendors · 16 products