CVE-2024-0147

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

NVIDIA GPU display driver for Windows and Linux contains a vulnerability where referencing memory after it has been freed can lead to denial of service or data tampering.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
NVIDIANVIDIA GPU Display Driver, vGPU softwareR535, R550, R560, R565

References

Timeline

Published
Jan 28, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-01487.6NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physicCVE-2024-01493.3NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an attacker unauthorized access to files. A successful exploiCVE-2024-01507.1NVIDIA GPU display driver for Windows and Linux contains a vulnerability where data is written past the end or before the beginning of a bufCVE-2024-01516.5Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions (CMSE), that has been compiledCVE-2024-01537.8Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Valhall GPU Firmware, Arm Ltd Arm 5th Gen GCVE-2024-01543.3Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged aCVE-2024-01557.8Dell Digital Delivery, versions prior to 5.2.0.0, contain a Use After Free Vulnerability. A local low privileged attacker could potentially CVE-2024-01567.8Dell Digital Delivery, versions prior to 5.2.0.0, contain a Buffer Overflow Vulnerability. A local low privileged attacker could potentiallyCVE-2024-01576.5Dell Storage Resource Manager, 4.9.0.0 and below, contain(s) a Session Fixation Vulnerability in SRM Windows Host Agent. An adjacent networkCVE-2024-01586.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exCVE-2024-01595.5Dell Alienware Command Center, versions 5.5.52.0 and prior, contain improper access control vulnerability, leading to Denial of Service on lCVE-2024-01606.8Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exp
CVE-2024-0147: Medium severity, CVSS 5.5 | Vulnix