CVE-2016-7382

For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys for Windows or nvidia.ko for Linux handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an...

CVE-2016-8805

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x7000014 where a value passed from an user to the driver is used without...

CVE-2016-8807

CVE-2016-8807 affects the NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in the kernel-mode layer. The issue occurs in the DxgDdiEscape handler for ID 0x10000e9, where a user-supplied size is used as the input size to memcpy, causing a stack-based buffer overflow. This can lead to denial of ser...

CVE-2016-8806

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x5000027 where a pointer passed from an user to the driver is used without...

CVE-2016-7387

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x600000D where a value passed from a user to the driver is used without...

CVE-2016-7389

The CVE-2016-7389 issue affects NVIDIA GPU Display Driver for Linux on NVIDIA Quadro, NVS, GeForce, and Tesla products. It involves the kernel-mode layer (nvidia.ko) mmap() handler with improper input validation, enabling privilege escalation by gaining access to arbitrary physical memory. Affect...

CVE-2016-7386

CVE-2016-7386 affects NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in the kernel mode layer. The vulnerability in the DxgDdiEscape handler (ID 0x70000D4) can leak kernel memory to user space via an uninitialized buffer. Affected products include NVIDIA Quadro, NVS, and GeForce on Windows; vul...

CVE-2016-8808

CVE-2016-8808 affects NVIDIA Windows GPU Display Driver on Quadro, NVS, and GeForce Windows systems. The vulnerability lies in the kernel-mode driver nvlddmkm.sys in the DxgDdiEscape handler, where an input value from user space is used as an index into an internal array without proper validation...

CVE-2016-7387

This CVE affects NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in Quadro/NVS/GeForce on Windows. The vulnerability arises in the DxgDdiEscape handler for ID 0x600000D where a user-supplied value is used as an internal array index without validation, enabling denial of service or potential priv...

CVE-2016-7382

The CVE-2016-7382 issue affects NVIDIA GPUs (Quadro, NVS, GeForce, Tesla) with the GPU Display Driver. It is a kernel-mode vulnerability in the driver’s nvlddmkm.sys (Windows) / nvidia.ko (Linux) handler where a missing permissions check can allow an attacker to access arbitrary physical memory, ...

Google Releases Supplemental Patch for Dirty Cow Vulnerability

Google’s November Android Security Bulletin, released Monday, patched 15 critical vulnerabilities and addressed 85 CVEs overall. But conspicuously absent is a fix for the Linux race condition vulnerability known as Dirty Cow Copy-on-Write that also impacts Android. While Google didn’t issue an...

NVIDIA Linux GPU Display Driver 304.x < 304.132 / 340.x < 340.98 / 361.93.x < 361.93.03 / 367.x < 367.55 / 370.x < 370.28 Multiple Vulnerabilities

The version of the NVIDIA GPU display driver installed on the remote Linux host is 304.x prior to 304.132, 340.x prior to 340.98, 361.93.x prior to 361.93.03, 367.x prior to 367.55, or 370.x prior to 370.28. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the kernel-mo...

NVIDIA Windows GPU Display Driver 340.x / 341.x / 342.x < 342.00 / 375.x < 375.63 Multiple Vulnerabilities

The version of the NVIDIA GPU display driver installed on the remote Windows host is 340.x, 341.x, or 342.x prior to 342.00, or 375.x prior to 375.63. It is, therefore, affected by multiple vulnerabilities : - An array-indexing error exists in nvlddmkm.sys due to improper validation of input. A...

NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2016-10576)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A local elevation of privilege vulnerability exists in NVIDIA Windows GPU Display Driver, which can be exploited by a local attacker to cause a denial of service or elevation of...

NVIDIA Windows GPU Display Driver Local Information Disclosure Vulnerability

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A local information disclosure vulnerability exists in NVIDIA Windows GPU Display Driver, which can be exploited by a local attacker to disclose kernel memory into user space with t...

NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2016-10566)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A local elevation of privilege vulnerability exists in NVIDIA Windows GPU Display Driver, which arises from the program failing to properly validate values. A local attacker could...

NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2016-10569)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A local elevation of privilege vulnerability exists in NVIDIA Windows GPU Display Driver, which arises from the program failing to properly validate the size of the input buffer. A...

NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2016-10534)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A local elevation of privilege vulnerability exists in NVIDIA Windows GPU Display Driver, which arises from the program failing to properly validate values. A local attacker could...

CVE-2016-6734

An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...

CVE-2016-6732

An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...