CVE-2024-0107

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-08-08 · updated 2026-06-17
Weakness: CWE-125

Description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Affected products

NVIDIA Cloud Gaming: all versions
NVIDIA Guest driver: from 470 before 475.14; from 555 before 556.12; from 535 before 538.78; from 550 before 552.74 — fixed in 475.14, 538.78, 552.74, 556.12
NVIDIA Virtual GPU Software: before 13.12; from 14.0 before 16.7; from 17.0 before 17.3 — fixed in 13.12, 16.7, 17.3

How to fix

Upgrade to a fixed version: NVIDIA Guest driver 475.14, 538.78, 552.74, 556.12; NVIDIA Virtual GPU Software 13.12, 16.7, 17.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-0107 or the next vulnerability affects your stack