Physx
Monthly
An out-of-bounds write in NVIDIA PhysX (versions 0.0 through 0.4.1.2, all platforms) allows memory corruption that could lead to code execution, data tampering, denial of service, or information disclosure. The CVSS 3.1 vector (7.8, AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) confines the attack to a local path: no attacker authentication is required, but a legitimate user must open or otherwise process attacker-controlled PhysX content before the write can be triggered, so there is no unauthenticated remote trigger. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the vendor-reported case is prioritized as a this-week item rather than an emergency.
An out-of-bounds write in NVIDIA PhysX (versions 0.0 through 0.4.1.2, all platforms) allows memory corruption that could lead to code execution, data tampering, denial of service, or information disclosure. The CVSS 3.1 vector (7.8, AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) confines the attack to a local path: no attacker authentication is required, but a legitimate user must open or otherwise process attacker-controlled PhysX content before the write can be triggered, so there is no unauthenticated remote trigger. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the vendor-reported case is prioritized as a this-week item rather than an emergency.