What happened
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user may cause a use-after-free condition by issuing a sequence of driver commands. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, and information disclosure.
Affected versions
GeForce: All driver versions prior to 610.60; All driver versions prior to 610.88; All driver versions prior to 616.56; All driver versions prior to 616.92; All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.; All driver versions prior to 582.78; All driver versions prior to 596.86; All driver versions prior to 616.92; All driver versions prior to 615.71.09; All driver versions prior to 610.57.04; All driver versions prior to 595.91.07; All driver versions prior to 580.178.04 Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
No public PoC reference has passed the current publication threshold.