CVE-2024-0071
CVE
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
7.8
CVE
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
- Record
CVE-2024-0071- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
EUVDEUVD-2024-15872
7.8
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
- Record
EUVD-2024-15872- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-4pm2-j7vr-cccw
7.8
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an...
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
- Record
GHSA-4pm2-j7vr-cccw- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
NVD
7.8
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
- Record
CVE-2024-0071- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-0071
7.8
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
- Record
UBUNTU-CVE-2024-0071- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nvidia-graphics-drivers-304Ubuntu:16.04:LTS |
All versions, plus listed versions 304.128-0ubuntu1304.131-0ubuntu2304.131-0ubuntu3304.132-0ubuntu0.16.04.2304.134-0ubuntu0.16.04.1304.135-0ubuntu0.16.04.1304.135-0ubuntu0.16.04.2304.135-0ubuntu0.16.04.3 |
None known |
nvidia-graphics-drivers-340Ubuntu:16.04:LTS |
All versions, plus listed versions 340.93-0ubuntu1340.93-0ubuntu2340.96-0ubuntu1340.96-0ubuntu2340.96-0ubuntu3 Show 6 moreShow less340.98-0ubuntu0.16.04.1340.101-0ubuntu0.16.04.1340.102-0ubuntu0.16.04.1340.102-0ubuntu0.16.04.2340.104-0ubuntu0.16.04.1340.107-0ubuntu0.16.04.2 |
None known |
nvidia-graphics-drivers-340Ubuntu:20.04:LTS |
All versions, plus listed versions 340.107-0ubuntu7340.107-0ubuntu8340.107-0ubuntu9340.108-0ubuntu1340.108-0ubuntu2340.108-0ubuntu5.20.04.1340.108-0ubuntu5.20.04.2 |
None known |
nvidia-graphics-drivers-390Ubuntu:20.04:LTS |
All versions, plus listed versions 390.129-0ubuntu2390.132-0ubuntu1390.132-0ubuntu2390.138-0ubuntu0.20.04.1390.141-0ubuntu0.20.04.1 Show 6 moreShow less390.143-0ubuntu0.20.04.1390.144-0ubuntu0.20.04.1390.147-0ubuntu0.20.04.1390.151-0ubuntu0.20.04.1390.154-0ubuntu0.20.04.1390.157-0ubuntu0.20.04.1 |
None known |
nvidia-graphics-drivers-430Ubuntu:20.04:LTS |
All versions, plus listed versions 430.50-0ubuntu2430.50-0ubuntu3 |
None known |
nvidia-graphics-drivers-435Ubuntu:20.04:LTS |
All versions, plus listed versions 435.21-0ubuntu2435.21-0ubuntu3435.21-0ubuntu4435.21-0ubuntu5435.21-0ubuntu6435.21-0ubuntu7 |
None known |
nvidia-graphics-drivers-440Ubuntu:20.04:LTS |
All versions, plus listed versions 440.31-0ubuntu1440.36-0ubuntu1440.44-0ubuntu1440.44-0ubuntu2440.59-0ubuntu1 Show 9 moreShow less440.59-0ubuntu2440.64-0ubuntu1440.64-0ubuntu2440.64-0ubuntu3440.82-0ubuntu1440.82+really.440.64-0ubuntu4440.82+really.440.64-0ubuntu5440.82+really.440.64-0ubuntu6440.100-0ubuntu0.20.04.1 |
None known |
nvidia-graphics-drivers-450Ubuntu:20.04:LTS |
All versions, plus listed versions 450.66-0ubuntu0.20.04.1450.80.02-0ubuntu0.20.04.2450.102.04-0ubuntu0.20.04.1450.102.04-0ubuntu0.20.04.2450.119.03-0ubuntu0.20.04.1 |
None known |
nvidia-graphics-drivers-460Ubuntu:20.04:LTS |
All versions, plus listed versions 460.32.03-0ubuntu0.20.04.1460.39-0ubuntu0.20.04.1460.56-0ubuntu0.20.04.1460.73.01-0ubuntu0.20.04.1460.80-0ubuntu0.20.04.2460.91.03-0ubuntu0.20.04.1 |
None known |
nvidia-graphics-drivers-460-serverUbuntu:20.04:LTS |
All versions, plus listed versions 460.32.03-0ubuntu0.20.04.1460.32.03-0ubuntu0.20.04.2460.73.01-0ubuntu0.20.04.1460.91.03-0ubuntu0.20.04.1460.106.00-0ubuntu0.20.04.1460.106.00-0ubuntu0.20.04.2 |
None known |
Show 11 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nvidia-graphics-drivers-510Ubuntu:20.04:LTS |
All versions, plus listed versions 510.47.03-0ubuntu0.20.04.1510.54-0ubuntu0.20.04.1510.60.02-0ubuntu0.20.04.2510.73.05-0ubuntu0.20.04.1510.85.02-0ubuntu0.20.04.1510.108.03-0ubuntu0.20.04.1 |
None known |
nvidia-graphics-drivers-520Ubuntu:20.04:LTS |
All versions, plus listed versions 520.56.06-0ubuntu0.20.04.1 |
None known |
nvidia-graphics-drivers-390Ubuntu:22.04:LTS |
All versions, plus listed versions 390.144-0ubuntu2390.144-0ubuntu3390.147-0ubuntu1390.151-0ubuntu0.22.04.1390.154-0ubuntu0.22.04.1390.157-0ubuntu0.22.04.1390.157-0ubuntu0.22.04.2 |
None known |
nvidia-graphics-drivers-418-serverUbuntu:22.04:LTS |
All versions, plus listed versions 418.211.00-0ubuntu2418.226.00-0ubuntu2418.226.00-0ubuntu3418.226.00-0ubuntu4418.226.00-0ubuntu5~0.22.04.1 |
None known |
nvidia-graphics-drivers-430Ubuntu:22.04:LTS |
All versions, plus listed versions 430.50-0ubuntu3 |
None known |
nvidia-graphics-drivers-440Ubuntu:22.04:LTS |
All versions, plus listed versions 440.100-0ubuntu1 |
None known |
nvidia-graphics-drivers-450Ubuntu:22.04:LTS |
All versions, plus listed versions 450.119.03-0ubuntu1 |
None known |
nvidia-graphics-drivers-455Ubuntu:22.04:LTS |
All versions, plus listed versions 455.45.01-0ubuntu1 |
None known |
nvidia-graphics-drivers-460Ubuntu:22.04:LTS |
All versions, plus listed versions 460.91.03-0ubuntu1 |
None known |
nvidia-graphics-drivers-510Ubuntu:22.04:LTS |
All versions, plus listed versions 510.54-0ubuntu1510.54-0ubuntu2510.60.02-0ubuntu1510.73.05-0ubuntu0.22.04.1510.85.02-0ubuntu0.22.04.1510.85.02-0ubuntu0.22.04.2510.108.03-0ubuntu0.22.04.1 |
None known |
nvidia-graphics-drivers-520Ubuntu:22.04:LTS |
All versions, plus listed versions 520.56.06-0ubuntu0.22.04.1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-0071 is a high vulnerability (CVSS 7.8) in Nvidia Geforce, published March 27, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. No source names a fixed version.