Three vulnerabilities in NVIDIA graphics driver could cause memory corruption

Summary: Cisco Talos disclosed three vulnerabilities in the shader functionality of the NVIDIA D3D10 driver, each rated 8.5 out of 10 on the CVSS scale and tracked as TALOS-2023-1719, TALOS-2023-1720 and TALOS-2023-1721 under CVE-2022-34671. A specially crafted shader packer can cause memory corruption in the driver, and Talos researchers triggered the issues from a HYPER-V guest using RemoteFX, leading to execution of vulnerable code on the HYPER-V host inside the rdvgm.exe process.
What you should know: An attacker in a guest VM can use these flaws to escape to the host, and Talos says they could also be triggered from a web browser via WebGL and WebAssembly, so a single crafted shader can cross the boundary your virtualization security depends on.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2022-34671
Related: Vulnerability Spotlight: NVIDIA driver memory corruption vulnerabilities discovered Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026