CVE-2024-0117

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-10-26 · updated 2026-06-17
Weakness: CWE-125

Description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Affected products

NVIDIA Cloud Gaming Guest: before 566.03 — fixed in 566.03
NVIDIA Guest driver: from 565 before 566.03; from 550 before 553.24; from 535 before 538.95 — fixed in 538.95, 553.24, 566.03
NVIDIA Virtual GPU Software: before 16.8; from 17.0 before 17.4 — fixed in 16.8, 17.4

How to fix

Upgrade to a fixed version: NVIDIA Cloud Gaming Guest 566.03; NVIDIA Guest driver 538.95, 553.24, 566.03; NVIDIA Virtual GPU Software 16.8, 17.4. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-0117 or the next vulnerability affects your stack