NVIDIA Security Update Fix 10 Flaws In Its GPU Drivers

Share post:

Nvidia has released a security update to fix 10 vulnerabilities in its GPU drivers, including four high-severity vulnerabilities and six medium-severity vulnerabilities.

The four high severity flaws include CVE-2022-28181, CVE-2022-28182, CVE-2022-28183 and CVE-2022-28184.

CVE-2022-28181 (CVSS v3 score: 8.5) is an out-of-bounds bug caused by a specially crafted shader sent over the network. If exploited, this bug can lead to code execution, denial of service, privilege escalation, disclosure of information, and data manipulation.

CVE-2022-28182 (CVSS v3 score: 8.5) is a bug in the DirectX11 user mode driver. This bug allows an unauthorized attacker to send a specially crafted shader over the network. It may also cause a denial of service, privilege escalation, information disclosure, and data manipulation.

CVE-2022-28183 (CVSS v3 score: 7.7) is a bug found in the kernel mode layer. It allows an unprivileged regulator to initiate an unrestricted read that may lead to denial of service and disclosure of information.

CVE-2022-28184 (CVSS v3 score: 7.7) is a vulnerability in the kernel mode layer that allows a regular unprivileged user to access administrator-privileged registers, resulting in denial of service, disclosure of information, and data manipulation.

The vulnerabilities require low privileges and no user interaction, so they can be embedded in malware. This allows the attacker to execute commands with higher privileges.

The updates have been provided for Tesla, RTX/Quadro, NVS, Studio, and GeForce software products covering driver branches R450, R470, and R510.

The sources for this piece include an article in BleepingComputer.

Featured Tech Jobs


Related articles

Canada, U.S. sign international guidelines for safe AI development

Eighteen countries, including Canada, the U.S. and the U.K., today agreed on recommended guidelines to developers in their nations for the secure design, development, deployment, and operation of artificial intelligent systems. It’s the latest in a series of voluntary guardrails that nations are urging their public and private sectors to follow for overseeing AI in

Cyber Security Today, Nov. 27, 2023 – Ransomware gang posts data stolen from a Canadian POS provider, and more

This episode reports on the latest ransomware attacks, and details of how a gang that scams people selling used products on

Cyber Security Today, Week in Review for the week ending November 24, 2023

This episode features discussion on Australia's decision to not make ransowmare payments illegal, huge hacks of third-party service suppliers in Canada and the U.S. and whether email and smartphone service providers are doing enough to protect

Cyber Security Today, Nov. 24, 2023 – A warning to tighten security on Kubernetes containers, and more

This episode reports on the increasing number of vulnerable Kubernetes containers online, the latest acknowledged data breaches, a browser scam aimed at Macs

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways