8.8

CVE-2022-34671: nvidia gpu_display_driver Out-of-bounds Write

CVSS: 8.8v3.1HighModified
Published 30-12-2022Last modified 11-04-2025
Open JSON

Vulnerability summary

CVE-2022-34671 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in nvidia gpu_display_driver. EPSS estimates a 1.42% chance of exploitation in the next 30 days, higher than 72.4% of scored vulnerabilities.

Overall risk
35/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (NVD)
EPSS score
1.42%
0%100%
Low · +0.02 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 30-12-2022
    PublishedVulnerability first disclosed.
  2. 11-04-2025
    Last modifiedVulnerability information updated.

Description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can cause an out-of-bounds write, which may lead to code execution, information disclosure, and denial of service.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

1.42%

Chance of exploitation in the next 30 days

Percentile

72%

Versus all other CVEs

30-day change

+0.02 pp

From 1.40% on 19-09-2026

19-09-202619-10-2026
EPSS score
1.42%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Nvidia2 products
  • gpu_display_driver≥ 470, < 474.14 | ≥ 510, < 514.08 | ≥ 515, < 517.88 | ≥ 525, < 527.27 | ≥ 450, < 454.02 | ≥ 515, ≤ 517.88 | ≥ 525, < 527.41 | ≥ 525, < 526.98
  • nvidia gpu display driver for windowsAll versions prior to and including 15.2, 13.7, and 11.12, and all versions prior to and including the May 2023 release

1 vendor · 2 products

References

5 links