VULNERABILITY INTELLIGENCE

CVE-2022-28188

CVSS score5.5 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2022-05-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where the product receives input or data, but does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly, which may lead to denial of service.

Weakness classification

  • psirt@nvidia.com: CWE-20
  • nvd@nist.gov: CWE-20

Primary references