Privilege escalation

An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

CVE-2019-7245

An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

CVE-2019-7245

Summary: TechPowerUp GPU-Z’s GPU-Z.sys driver prior to 2.23.0 exposes a wrmsr instruction via an IOCTL, with improper MSR filtering. This allows arbitrary MSR writes and can lead to Ring-0 code execution and privilege escalation. Impact: high (privilege escalation, potential full control). Affect...

NVIDIA D3D10 Driver nvwgf2umx_cfg.dll nvwg FTOI code execution vulnerability

Summary An exploitable code execution vulnerability exists in the nvwg functionality of NVIDIA Corporation NVIDIA D3D10 driver nvwgf2umxcfg.dll, version 442.50 - 26.21.14.4250. A specially crafted shader could allow an adversary to execute remote code. An attacker can use this vulnerability to...

CVE-2019-20600

An issue was discovered on Samsung mobile devices with O8.0 and P9.0 Exynos8890 chipsets software. A use-after-free occurs in the MALI GPU driver. The Samsung ID is SVE-2019-13921-1 May 2019...

CVE-2019-20600

An issue was discovered on Samsung mobile devices with O8.0 and P9.0 Exynos8890 chipsets software. A use-after-free occurs in the MALI GPU driver. The Samsung ID is SVE-2019-13921-1 May 2019...

Double free

An issue was discovered on Samsung mobile devices with O8.0 and P9.0 Exynos8890 chipsets software. A use-after-free occurs in the MALI GPU driver. The Samsung ID is SVE-2019-13921-1 May 2019...

CVE-2019-20577

An issue was discovered on Samsung mobile devices with P9.0 Exynos chipsets software. The MALI GPU Driver allows a kernel panic. The Samsung ID is SVE-2019-14372 August 2019...

CVE-2019-20577

An issue was discovered on Samsung mobile devices with P9.0 Exynos chipsets software. The MALI GPU Driver allows a kernel panic. The Samsung ID is SVE-2019-14372 August 2019...

Code injection

An issue was discovered on Samsung mobile devices with P9.0 Exynos chipsets software. The MALI GPU Driver allows a kernel panic. The Samsung ID is SVE-2019-14372 August 2019...

CVE-2019-20600

An issue was discovered on Samsung mobile devices with O8.0 and P9.0 Exynos8890 chipsets software. A use-after-free occurs in the MALI GPU driver. The Samsung ID is SVE-2019-13921-1 May 2019...

CVE-2019-20600

CVE-2019-20600 affects Samsung mobile devices running O(8.0) and P(9.0) on Exynos8890 systems. The issue is a use-after-free in the MALI GPU driver. Affected component: Mali GPU driver in affected Samsung devices; root cause: use-after-free vulnerability. The provided documents do not specify the...

CVE-2019-20577

An issue was discovered on Samsung mobile devices with P9.0 Exynos chipsets software. The MALI GPU Driver allows a kernel panic. The Samsung ID is SVE-2019-14372 August 2019...

CVE-2019-20577

CVE-2019-20577 affects Samsung mobile devices running P(9.0) on Exynos chipsets, where the Mali GPU driver can cause a kernel panic. The issue is documented across multiple sources (NVD, Red Hat RH:CVE-2019-20577, CVE records) with Samsung’s internal reference SVE-2019-14372 (August 2019). Public...

NVIDIA Windows GPU Display Driver (Feb 2020)

A display driver installed on the remote Windows host is affected by multiple vulnerabilities. - A privilege escalation vulnerability exists in NVIDIA Control Panel component. An unauthenticated, local attacker can exploit this, via corrputing a system file, to gain priviledged access to the...

CVE-2020-5960

NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module nvidia.ko, where a null pointer dereference may occur, which may lead to denial of service...

Design/Logic Flaw

NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin in which an input index value is incorrectly validated which may lead to denial of service...

Null pointer dereference

NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module nvidia.ko, where a null pointer dereference may occur, which may lead to denial of service...

CVE-2020-5959

CVE-2020-5959 affects NVIDIA Virtual GPU Manager (vGPU) plugin. The input index value is incorrectly validated, which may lead to denial of service. The issue is tracked in NVIDIA’s security bulletin with a base score of 7.8 (CVSS v3, Local, Low attack complexity, Privileges required: Low, Impact...

CVE-2020-5960

NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module nvidia.ko, where a null pointer dereference may occur, which may lead to denial of service...