CVE-2019-5667: NULL Pointer Dereference

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiSetRootPageTable in which the application dereferences a pointer that it expects to be valid, but is NULL, which may lead to code execution, denial of service or escalation of...

CVE-2019-5665: Improper Link Resolution Before File Access

NVIDIA Windows GPU Display driver contains a vulnerability in the 3D vision component in which the stereo service software, when opening a file, does not check for hard links. This behavior may lead to code execution, denial of service or escalation of privileges...

Security Bulletin: NVIDIA GPU Display Driver - February 2019

NVIDIA has released a software security update for the NVIDIA GPU Display Driver. This update addresses issues that may lead to denial of service, escalation of privileges, code execution, or information disclosure. To protect your system, download and install this software update through NVIDIA...

PT-2019-17800

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display driver affected versions not specified Description The issue is related to the 3D vision component in the NVIDIA Windows GPU Display driver, specifically in the stereo service software. When this software opens a fil...

PT-2019-17802

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgkDdiSetRootPageTable, where the application dereferences a pointer that it expects to...

PT-2019-17801

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue arises from the use of untrusted input when calculating an array index in the kernel mode layer, specifically within the create context command DDI...

PT-2019-3157

Name of the Vulnerable Software and Affected Versions: NVIDIA Display Driver affected versions not specified Description: The issue is related to errors in handling NULL pointers in the DxgkDdiSetRootPageTable function of the nvlddmkm.sys driver for NVIDIA GeForce, Quadro, and Tesla graphics...

PT-2019-3156

Name of the Vulnerable Software and Affected Versions: NVIDIA Display Driver affected versions not specified Description: The issue is related to the DxgkDdiSetRootPageTable function in the NVIDIA Display Driver for GeForce, Quadro, and Tesla graphics processors. It is caused by array indexing...

PT-2019-2987

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver all versions VMware ESXi, Workstation and Fusion affected versions not specified Description The issue is related to a vulnerability in DirectX drivers, specifically in the pixel shader functionality, where a...

Arbitrary Code Execution

qemu-kvm-rhev is vulnerable to arbitrary code execution attacks. The vulnerability exists as a heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA...

Denial Of Service (DoS)

qemu-kvm-rhev is vulnerable to denial of service DoS attacks. The vulnerability exists through buffer overflow in the vncrefreshserversurface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service heap memory corruption and process crash or...

CVE-2016-9603

A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this fla...

CVE-2016-9603

A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this fla...

CVE-2016-9603

A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this fla...

CVE-2016-9603

CVE-2016-9603 affects QEMU’s Cirrus CLGD 54xx VGA emulator, specifically the VNC display driver support prior to 2.9. A heap-based buffer overflow can occur when a VNC client updates the display after a guest VGA operation. A privileged guest user could crash the QEMU process or potentially execu...

CVE-2017-2633

An out-of-bounds memory access issue was found in Quick Emulator QEMU before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vncrefreshserversurface'. A user inside a guest could use this flaw to crash the QEMU process...

Design/Logic Flaw

An out-of-bounds memory access issue was found in Quick Emulator QEMU before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vncrefreshserversurface'. A user inside a guest could use this flaw to crash the QEMU process...

CVE-2017-2633

CVE-2017-2633 : Out-of-bounds memory access in QEMU's VNC display driver (vnc_refresh_server_surface) could allow a guest user to crash the QEMU process. Affected: QEMU versions before 1.7.2. Remediation/fix not described in the provided documents.

CVE-2017-2633

An out-of-bounds memory access issue was found in Quick Emulator QEMU before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vncrefreshserversurface'. A user inside a guest could use this flaw to crash the QEMU process...

CVE-2016-9603: Heap-based Buffer Overflow

A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this fla...