CVE-2017-0321

CVE-2017-0321 affects NVIDIA GPU Display Driver kernels in both Linux and Windows, caused by a NULL pointer dereference in the kernel mode layer handler when given invalid user input. The vulnerability may allow a local attacker to cause a denial of service and potentially escalate privileges. Pu...

CVE-2017-0320

Summary: NVIDIA Windows GPU Display Driver vulnerable in the kernel mode layer handler (nvlddmkm.sys) where improper handling of values can cause denial of service. This CVE-2017-0320 is cited among a set of kernel-mode vulnerabilities affecting NVIDIA 375.x/378.x driver branches and related comp...

CVE-2017-0318

CVE-2017-0318 affects all versions of the NVIDIA Linux GPU Display Driver. The vulnerability is in the kernel mode layer handler, where improper validation of an input parameter may cause a denial of service on the system. No specific patch/version/fix is provided in the connected documents; deta...

CVE-2017-0324

The CVE-2017-0324 case concerns the NVIDIA Windows GPU Display Driver, where the kernel-mode driver component nvlddmkm.sys mishandles input buffer sizing in the DxgkDdiEscape path. The vulnerability can lead to denial of service or, in some cases, elevation of privileges. Public details across co...

CVE-2017-0309

All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where multiple integer overflows may cause improper memory allocation leading to a denial of service or potential escalation of privileges...

CVE-2017-0310

CVE-2017-0310 involves the NVIDIA GPU Display Driver’s kernel-mode layer handler, where improper access controls allow an unprivileged user to trigger a denial of service. The Initial Description notes vulnerability across all driver versions. Connected documents corroborate a local-impact kernel...

CVE-2017-0322

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler where a value passed from a user to the driver is not correctly validated and used as the index to an array, leading to denial of service or potential escalation of privileges...

CVE-2017-0314

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys implementation of the SubmitCommandVirtual DDI DxgkDdiSubmitCommandVirtual where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to...

CVE-2017-0314

CVE-2017-0314 affects the NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in the kernel-mode layer for the SubmitCommandVirtual DDI. Untrusted input can reference memory outside the intended buffer boundary, leading to denial of service or elevation of privileges . The description indicates the ...

CVE-2017-0322

NVIDIA Windows GPU Display Driver (nvlddmkm.sys) contains a kernel-mode vulnerability (CVE-2017-0322) where a value from user space is not validated before being used as an array index. This results in denial of service or potential privilege escalation. It is a local issue with low attack comple...

CVE-2017-0313

CVE-2017-0313 affects the NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in the SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual). The issue is an out-of-bounds/read/write condition caused by untrusted input referencing memory outside the buffer, leading to denial of service or local privi...

CVE-2017-0309

NVIDIA GPU Display Driver is affected (Linux and Windows) by CVE-2017-0309 and related CVEs due to integer overflows in the kernel mode layer handler, causing denial of service and potential privilege escalation. Linux driver lines: 304.x<304.135, 340.x<340.102, 361.x<361.119, 375.x<3...

CVE-2017-0312

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscapeID 0x100008b where user provided input is used as the limit for a loop may lead to denial of service or potential escalation of privileges...

CVE-2017-0310

All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper access controls allowing unprivileged user to cause a denial of service...

CVE-2017-0311

NVIDIA GPU Display Driver R378 contains a vulnerability in the kernel mode layer handler where improper access control may lead to denial of service or possible escalation of privileges...

CVE-2017-0313

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys implementation of the SubmitCommandVirtual DDI DxgkDdiSubmitCommandVirtual where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to...

CVE-2017-0320

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper handling of values may cause a denial of service on the system...

CVE-2017-0323

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges...

CVE-2017-0324

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges...

CVE-2017-0319

Talos’ vulnerability report confirms CVE-2017-0319 is a heap overflow in Poppler-0.53.0 affecting the image rendering path DCTStream::readProgressiveSOF(). A crafted PDF can trigger heap corruption via an oversized color components count during image rendering, enabling potential code execution o...