Stack overflow

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before GFE 3.1.0.52 contains a vulnerability in the kernel mode layer nvstreamkms.sys allowing a user to cause a stack buffer overflow with specially crafted executable paths, leading t...

Design/Logic Flaw

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x700010d where a value passed from a user to the driver is used without...

Design/Logic Flaw

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x70000d5 where a value passed from an user to the driver is used without...

Design/Logic Flaw

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x7000014 where a value passed from an user to the driver is used without...

Design/Logic Flaw

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x100009a where a value passed from an user to the driver is used without...

CVE-2016-7383

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in a memory mapping API in the kernel mode layer nvlddmkm.sys handler, leading to denial of service or potential escalation of privileges...

CVE-2016-8811

CVE-2016-8811 affects NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in Quadro/NVS/GeForce lines. The kernel-mode handler for DxgDdiEscape 0x7000170 does not validate input buffer size, enabling denial of service or potential privilege escalation. Public references describe multiple related iss...

CVE-2016-8806

CVE-2016-8806 affects the NVIDIA Windows GPU Display Driver on NVIDIA Quadro/NVS/GeForce. The kernel-mode driver component nvlddmkm.sys handles DxgDdiEscape ID 0x5000027 and uses a user-provided pointer without validation, leading to possible denial of service or privilege escalation. Affected dr...

CVE-2016-8810

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x100009a where a value passed from an user to the driver is used without...

CVE-2016-7386

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x70000D4 which may lead to leaking of kernel memory contents to user space...

CVE-2016-7381

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where a user input to index an array is not bounds checked, leading to denial of...

CVE-2016-8812

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before GFE 3.1.0.52 contains a vulnerability in the kernel mode layer nvstreamkms.sys allowing a user to cause a stack buffer overflow with specially crafted executable paths, leading t...

CVE-2016-7382

For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys for Windows or nvidia.ko for Linux handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an...

CVE-2016-7382

For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys for Windows or nvidia.ko for Linux handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an...

CVE-2016-7389

For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver on Linux R304 before 304.132, R340 before 340.98, R367 before 367.55, R36193 before 361.93.03, and R370 before 370.28 contains a vulnerability in the kernel mode layer nvidia.ko handler for mmap where improper inpu...

CVE-2016-7381

Summary (CVE-2016-7381 family) : NVIDIA Windows GPU Display Driver on Quadro, NVS, and GeForce (drivers in the 340.x/341.x/342.x line before 342.00 and 375.x before 375.63) contains a vulnerability in the kernel-mode nvlddmkm.sys handling of DxgDdiEscape where an input value used to index an inte...

CVE-2016-8810

CVE-2016-8810 affects NVIDIA Windows GPU Display Driver (nvlddmkm.sys) on Quadro/NVS/GeForce with DxgDdiEscape 0x100009a. The root cause is a value passed from user space used as an index to an internal array without proper validation, leading to denial of service or potential privilege escalatio...

CVE-2016-8805

CVE-2016-8805 affects NVIDIA Windows GPU Display Driver in the kernel mode layer (nvlddmkm.sys) for Quadro, NVS, and GeForce on Windows. The vulnerability arises from DxgDdiEscape ID 0x7000014 using a value from user input as an index into an internal array without validation, enabling denial of ...

CVE-2016-7388

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or...

CVE-2016-7390

CVE-2016-7390 affects NVIDIA Windows GPU Display Driver (nvlddmkm.sys) for Quadro/NVS/GeForce. The kernel-mode DxgDdiEscape handler for ID 0x7000194 uses a user-supplied value as an index into an internal array without validation, enabling denial of service or potential privilege escalation. Affe...