NVIDIA Display Driver Out-of-Bounds Read Vulnerability in Video Decoder

A vulnerability allowing an out-of-bounds read has been identified in the NVIDIA Display Driver for both Windows and Linux. This issue arises in a video decoder component, where an attacker could potentially exploit the vulnerability, leading to information disclosure or a denial-of-service condition.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure or cause a denial-of-service condition, disrupting normal functionality.

Remediation

Users can download and install the latest NVIDIA Display Driver versions that include the security update. For Windows, the updated version is 581.42 for the R580 and R570 branches, and 539.56 for the R535 branch. For Linux, the updated version is 580.95.05 for the R580 branch, 570.195.03 for the R570 branch, and 535.274.02 for the R535 branch.