CVE-2023-0187

What it actually does

Out-of-bounds read in the kernel-mode layer handler of the NVIDIA GPU Display Driver allows a local process to access invalid memory, resulting in a denial of service through kernel instability or crash.

Why it matters to the business

Affected Windows and Linux systems with NVIDIA GPUs or virtual GPU deployments may experience unexpected graphics-related crashes and service interruptions, causing downtime for graphics workloads while the low EPSS score and local-only attack vector indicate limited widespread exploitation risk.

How an attack unfolds

An attacker with local low-privileged access on a system running vulnerable NVIDIA drivers supplies crafted input to the kernel mode handler, triggering an out-of-bounds read that crashes the kernel; no remote vector or data disclosure is possible.

How to fix it

Apply the latest NVIDIA GPU Display Driver updates for Windows and Linux as soon as they become available; test in a non-production environment before broad deployment and monitor NVIDIA security advisories for patch availability.

How to confirm the fix worked

Confirm current driver versions match or exceed the latest NVIDIA releases, review release notes for this issue, and perform stability testing under graphics load to verify absence of crashes.

Typical attack path

1. Gain local access to a target system with an affected NVIDIA GPU driver
2. Execute or trigger a process that interacts with the kernel-mode display driver
3. Supply input that causes an out-of-bounds memory read
4. Induce kernel crash or denial of service

How to detect it

Review system and kernel logs on Windows and Linux hosts for NVIDIA driver fault entries or unexpected process terminations involving the display driver; correlate with presence of vulnerable driver versions.

What your security team should do

• Schedule prompt deployment of NVIDIA driver updates across all Windows and Linux endpoints
• Limit local user privileges on systems with NVIDIA hardware where feasible
• Incorporate driver version checks into vulnerability scanning routines
• Track NVIDIA bulletins for confirmation of fixed releases given the absence of listed fixed versions