CVE-2024-0128 — NVIDIA / vGPU and Cloud Gaming

CVE-2024-0128

NVIDIA / vGPU and Cloud Gaming PUBLISHED

Description (CNA)

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager that allows a user of the guest OS to access global resources. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges.

Affected (CNA)

Vendor / product	Versions
NVIDIA / vGPU and Cloud Gaming	affected All versions prior to 17.4, 16.8, and the October 2024 release

CWE

CWE-732

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5586

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.