CVE-2016-7391

NVIDIA CVE-2016-7391 affects the Windows GPU Display Driver (nvlddmkm.sys) in the kernel mode layer. The issue is in DxgDdiEscape 0x100010b where a missing array bounds check can write to kernel memory, enabling denial of service or potential privilege escalation. Affected driver ranges per CVE d...

CVE-2016-8809

CVE-2016-8809 affects NVIDIA Windows GPU Display Driver (Quadro/NVS/GeForce) with vulnerable nvlddmkm.sys DxgDdiEscape handler for 0x70001b2 where the input buffer size is not validated, enabling local denial of service or privilege escalation. Affected driver lines include NVIDIA Windows Display...

CVE-2016-8809

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x70001b2 where the size of an input buffer is not validated, leading to denial ...

CVE-2016-7382

For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys for Windows or nvidia.ko for Linux handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an...

CVE-2016-7389

For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver on Linux R304 before 304.132, R340 before 340.98, R367 before 367.55, R36193 before 361.93.03, and R370 before 370.28 contains a vulnerability in the kernel mode layer nvidia.ko handler for mmap where improper inpu...

CVE-2016-5025

For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVAPI support layer causes a denial of service vulnerability blue screen crash within the NVIDIA Windows graphics drivers...

CVE-2016-4961

CVE-2016-4961 affects NVIDIA Quadro, NVS, and GeForce Windows drivers. The root cause is improper sanitization of parameters in the NVStreamKMS.sys API layer, causing a denial-of-service (blue-screen crash). Affected component is the NVStreamKMS.sys driver; impact is high for availability with lo...

CVE-2016-7382

For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys for Windows or nvidia.ko for Linux handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an...

CVE-2016-7389

For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver on Linux R304 before 304.132, R340 before 340.98, R367 before 367.55, R36193 before 361.93.03, and R370 before 370.28 contains a vulnerability in the kernel mode layer nvidia.ko handler for mmap where improper inpu...

CVE-2016-8810

CVE-2016-8810 affects NVIDIA Windows GPU Display Driver (nvlddmkm.sys) on Quadro/NVS/GeForce with DxgDdiEscape 0x100009a. The root cause is a value passed from user space used as an index to an internal array without proper validation, leading to denial of service or potential privilege escalatio...

CVE-2016-3161

CVE-2016-3161 affects NVIDIA Quadro/NVS/GeForce Windows drivers with GFE GameStream and NVTray Plugin unquoted service path, enabling code execution with SYSTEM/USER privileges on a vulnerable install. Root cause is an unquoted service path in the affected components; exploitation status is not d...

CVE-2016-7381

Summary (CVE-2016-7381 family) : NVIDIA Windows GPU Display Driver on Quadro, NVS, and GeForce (drivers in the 340.x/341.x/342.x line before 342.00 and 375.x before 375.63) contains a vulnerability in the kernel-mode nvlddmkm.sys handling of DxgDdiEscape where an input value used to index an inte...

CVE-2016-8805

CVE-2016-8805 affects NVIDIA Windows GPU Display Driver in the kernel mode layer (nvlddmkm.sys) for Quadro, NVS, and GeForce on Windows. The vulnerability arises from DxgDdiEscape ID 0x7000014 using a value from user input as an index into an internal array without validation, enabling denial of ...

CVE-2016-7383

CVE-2016-7383 affects NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in Quadro/NVS/GeForce on Windows. The vulnerability is in a memory-mapping API handler in the kernel-mode layer, enabling denial of service or potential privilege escalation. It is associated with driver versions: R340 before ...

CVE-2016-7385

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x700010d where a value passed from a user to the driver is used without...

CVE-2016-5852

For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system...

CVE-2016-5852

Summary: CVE-2016-5852 and related CVEs affect NVIDIA Quadro/NVS/GeForce Windows drivers (GFE GameStream/NVTray plugin and NVAPI/NVStreamKMS components). CVE-2016-5852 is an unquoted service path vulnerability in the NVTray Plugin that can be exploited locally via a malicious executable in the ro...

CVE-2016-7382

The CVE-2016-7382 issue affects NVIDIA GPUs (Quadro, NVS, GeForce, Tesla) with the GPU Display Driver. It is a kernel-mode vulnerability in the driver’s nvlddmkm.sys (Windows) / nvidia.ko (Linux) handler where a missing permissions check can allow an attacker to access arbitrary physical memory, ...

CVE-2016-7386

CVE-2016-7386 affects NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in the kernel mode layer. The vulnerability in the DxgDdiEscape handler (ID 0x70000D4) can leak kernel memory to user space via an uninitialized buffer. Affected products include NVIDIA Quadro, NVS, and GeForce on Windows; vul...

CVE-2016-8808

CVE-2016-8808 affects NVIDIA Windows GPU Display Driver on Quadro, NVS, and GeForce Windows systems. The vulnerability lies in the kernel-mode driver nvlddmkm.sys in the DxgDdiEscape handler, where an input value from user space is used as an index into an internal array without proper validation...