cve/2024/CVE-2024-0099.md

### [CVE-2024-0099](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0099)
![](https://img.shields.io/static/v1?label=Product&message=vGPU%20software%20and%20Cloud%20Gaming&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=All%20versions%20up%20to%20and%20including%2017.1%2C%2016.5%2C%2013.10%2C%20and%20the%20April%202024%20release%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-120&color=brightgreen)

### Description

NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could cause buffer overrun in the host. A successful exploit of this vulnerability might lead to information disclosure, data tampering, escalation of privileges, and denial of service.

### POC

#### Reference
- https://nvidia.custhelp.com/app/answers/detail/a_id/5551

#### Github
No PoCs found on GitHub currently.