CVE-2016-8820

CVE-2016-8820 affects all versions of NVIDIA Windows GPU Display Driver where the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape fails to validate the return value of a function, enabling an uninitialized value to be used as the source of a strcpy() call. This can lead to denial of ser...

CVE-2016-8824

NVIDIA Windows GPU Display Driver (nvlddmkm.sys) contains a privilege escalation vulnerability in the DxgDdiEscape handler (CVE-2016-8824). Improper access controls allow a regular user to write to a registry area intended for privileged users, enabling elevated privileges. Affected are the Windo...

CVE-2016-8819

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where a handle to a kernel object may be returned to the user, leading to possible denial of service or escalation of privileges...

CVE-2016-8819

NVIDIA Windows GPU Display Driver (nvlddmkm.sys) contains multiple vulnerabilities in the kernel mode layer DxgkDdiEscape handler. The Lenovo advisory and NVIDIA/NVD records describe issues including NULL-pointer checks and improper input handling, leading to denial of service and privilege escal...

CVE-2016-8823

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where the size of an input buffer is not validated leading to a denial of service or possible escalation of privileges...

CVE-2016-8826

CVE-2016-8826 affects NVIDIA GPU Display Driver. The vulnerability exists in the kernel-mode layer (nvlddmkm.sys on Windows, nvidia.ko on Linux) and can allow a local attacker to trigger a GPU interrupt storm, resulting in a denial of service. Multiple OpenVAS/Nessus/Mageia/U buntu advisories ref...

CVE-2016-8826

All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys for Windows or nvidia.ko for Linux where a user can cause a GPU interrupt storm, leading to a denial of service...

CVE-2016-8822

CVE-2016-8822 concerns the NVIDIA Windows GPU Display Driver (nvlddmkm.sys). The vulnerability exists in the kernel-mode layer handler for DxgDdiEscape IDs 0x600000E, 0x600000F, and 0x6000010, where a value supplied by a user is used as an index into an internal array without proper validation, e...

CVE-2016-8826

All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys for Windows or nvidia.ko for Linux where a user can cause a GPU interrupt storm, leading to a denial of service...

CVE-2016-8826: Undefined Security Weakness

All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys for Windows or nvidia.ko for Linux where a user can cause a GPU interrupt storm, leading to a denial of service...

PT-2016-7595

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer of the NVIDIA GPU Display Driver, where a user can cause a GPU interrupt storm. This can lead to a denial of...

PT-2016-7586

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgDdiEscape, where a value passed from a user to the driver is used without validation ...

CVE-2016-8824: Improper Access Control

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where improper access controls allow a regular user to write a part of the registry intended for privileged users only, leading to escalation of privileges...

PT-2016-7594

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver versions affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgDdiEscape, where the size of an input buffer is not validated. This can lead...

CVE-2016-8814: NULL Pointer Dereference

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where multiple pointers are used without checking for NULL, leading to denial of service or potential escalation of privileges...

CVE-2016-8820: Improper Input Validation

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where a check on a function return value is missing, potentially allowing an uninitialized value to be used as the source of a strcpy call, leading to denial of...

CVE-2016-8813: NULL Pointer Dereference

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where multiple pointers are used without checking for NULL, leading to denial of service or potential escalation of privileges...

CVE-2016-8819: Missing Release of File Descriptor or Handle after Effective Lifetime

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where a handle to a kernel object may be returned to the user, leading to possible denial of service or escalation of privileges...

CVE-2016-8817: Improper Restriction of Operations within the Bounds of a Memory Buffer

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where a value passed from a user to the driver is used without validation as the size input to memcpy, causing a buffer overflow, leading to denial of service o...

CVE-2016-8816: Improper Validation of Array Index

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where a value passed from a user to the driver is used without validation as the index to an array, leading to denial of service or potential escalation of...