PT-2017-10518

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgkDdiEscape, where an attempt to access an invalid object pointer may lead to denial o...

PT-2017-10523

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to improper handling of values in the kernel mode layer handler, which may cause a denial of service on the system. Recommendations At the momen...

PT-2017-10513

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver affected versions not specified Description The issue is related to improper access controls in the kernel mode layer handler, allowing an unprivileged user to cause a denial of service. Recommendations At the moment,...

CVE-2017-0322: Improper Validation of Array Index

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler where a value passed from a user to the driver is not correctly validated and used as the index to an array, leading to denial of service or potential escalation of privileges...

CVE-2017-0313: Improper Restriction of Operations within the Bounds of a Memory Buffer

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys implementation of the SubmitCommandVirtual DDI DxgkDdiSubmitCommandVirtual where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to...

PT-2017-10511

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgkDdiEscape, where untrusted input is used for buffer size calculation. This can lead ...

CVE-2017-0312: Improper Input Validation

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscapeID 0x100008b where user provided input is used as the limit for a loop may lead to denial of service or potential escalation of privileges...

CVE-2017-0321: NULL Pointer Dereference

All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges...

CVE-2017-0309: Integer Overflow or Wraparound

All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where multiple integer overflows may cause improper memory allocation leading to a denial of service or potential escalation of privileges...

CVE-2017-0314: Improper Restriction of Operations within the Bounds of a Memory Buffer

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys implementation of the SubmitCommandVirtual DDI DxgkDdiSubmitCommandVirtual where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to...

PT-2017-10522

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to improper handling of values in the kernel mode layer handler, which may cause a denial of service on the system. Recommendations At the momen...

PT-2017-10517

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver versions affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer implementation of the SubmitCommandVirtual DDI, specifically in the nvlddmkm.sys driver. Th...

PT-2017-10526

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a NULL pointer dereference caused by invalid user input in the kernel mode layer handler, which may lead to denial of service or potential...

CVE-2017-0310: Improper Privilege Management

All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper access controls allowing unprivileged user to cause a denial of service...

CVE-2017-0320: Undefined Security Weakness

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper handling of values may cause a denial of service on the system...

CVE-2017-0324: Improper Restriction of Operations within the Bounds of a Memory Buffer

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges...

CVE-2017-0323: NULL Pointer Dereference

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges...

Security Bulletin: NVIDIA GPU Display Driver contains multiple vulnerabilities in the kernel mode layer handler

Vulnerability Details The following sections summarize the vulnerabilities and list their CVSS risk assessments. CVE-2017-0308 NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where untrusted input used for buffer size...

NVIDIA UNIX driver -- multiple vulnerabilities in the kernel mode layer handler

NVIDIA Unix security team reports: NVIDIA GPU Display Driver contains vulnerabilities in the kernel mode layer handler where multiple integer overflows, improper access control, and improper validation of a user input may cause a denial of service or potential escalation of privileges...

PT-2017-2747

Name of the Vulnerable Software and Affected Versions Qualcomm display driver versions affected versions not specified Description The issue is related to insufficient access control in a display driver for mobile applications on the Android operating system. It involves the use of a variable...