CVE-2019-5681

CVE-2019-5681 affects NVIDIA SHIELD TV prior to the v8.0 release. The vulnerability resides in a custom NVIDIA API used by the mount system service, where user data could be overridden, potentially enabling code execution, denial of service, or information disclosure. Affected product: SHIELD TV ...

CVE-2019-5679

NVIDIA Shield TV Experience prior to v8.0, NVIDIA Tegra bootloader contains a vulnerability in nvtboot where the Trusted OS image is improperly authenticated, which may lead to code execution, denial of service, escalation of privileges, and information disclosure, code execution, denial of...

CVE-2019-5679

CVE-2019-5679 affects NVIDIA SHIELD TV (SHIELD Experience prior to v8.0). The vulnerability resides in the NVIDIA Tegra bootloader (nvtboot) where the Trusted OS image is not properly authenticated, potentially enabling code execution, denial of service, privilege escalation, and information disc...

CVE-2019-5687

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which an incorrect use of default permissions for an object exposes it to an unintended actor...

CVE-2019-5687

CVE-2019-5687 affects the NVIDIA Windows GPU Display Driver (kernel mode nvlddmkm.sys) with a flaw in the DxgkDdiEscape handler caused by an incorrect use of default permissions, exposing an object to an unintended actor. The vulnerability is documented across multiple sources (NVD entry, Red Hat...

CVE-2019-5686

The CVE-2019-5686 issue affects NVIDIA Windows GPU Display Driver for Windows, specifically the kernel-mode nvlddmkm.sys DxgkDdiEscape handler. The vulnerability arises from using an API function or data structure in a way that relies on properties not always guaranteed to be valid, which can lea...

CVE-2019-5686

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which the software uses an API function or data structure in a way that relies on properties that are not always guaranteed to be valid, which may lead to...

CVE-2019-5685

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause an out of bounds access to a shader local temporary array, which may lead to denial of service or code execution...

CVE-2019-5685

Affected software: NVIDIA Windows GPU Display Driver for Windows. Vulnerability: DirectX shader processing flaw can cause an out-of-bounds access/write to a shader local temporary array, potentially enabling denial of service or arbitrary code execution. Root cause: out-of-bounds handling in shad...

CVE-2019-5684

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause an out of bounds access of an input texture array, which may lead to denial of service or code execution...

CVE-2019-5684

CVE-2019-5684 affects the NVIDIA Windows GPU Display Driver for Windows. The vulnerability is in the DirectX shader path and can cause an out-of-bounds access (as described in NVD) or out-of-bounds write (per IBM’s vulnerability details), potentially enabling denial of service or arbitrary code e...

CVE-2019-5683

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the user mode video driver trace logger component. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of...

CVE-2019-5683

CVE-2019-5683 affects NVIDIA Windows GPU Display Driver (all versions) via the user-mode video driver trace logger. The issue arises when a local attacker with system access creates a hard link and the driver fails to detect hard-link attacks, potentially enabling code execution, denial of servic...

Vulnerability Spotlight: Multiple vulnerabilities in NVIDIA Windows GPU Display Driver, VMware ESXi, Workstation and Fusion

Piotr Bania of Cisco Talos discovered these vulnerabilities. Executive summary VMware ESXi, Workstation and Fusion are affected by an out-of-bounds write vulnerability that can be triggered using a specially crafted shader file. This vulnerability can be triggered from a VMware guest, affecting t...

NVIDIA Windows GPU Display Driver DirectX Driver Buffer Overflow Vulnerability (CNVD-2019-42771)

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA for the Windows platform.DirectX drivers are one of the Multimedia Programming Interfaces APIs that enhance 3D graphics and sound effects for games or multimedia programs. , which provides the hardware...

NVIDIA Windows GPU Display Driver DirectX Driver Buffer Overflow Vulnerability

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA for the Windows platform.DirectX drivers are one of the Multimedia Programming Interfaces APIs that enhance 3D graphics and sound effects for games or multimedia programs. , which provides the hardware...

NVIDIA NVWGF2UMX_CFG.DLL Shader functionality DCL_INDEXABLETEMP code execution vulnerability

Summary An exploitable memory corruption vulnerability exists in NVIDIA NVWGF2UMXCFG driver, versions 25.21.14.2531 and 425.31. A specially crafted pixel shader can cause an out-of-bounds memory write. An attacker can provide a specially crafted shader file to trigger this vulnerability. This...

NVIDIA NVWGF2UMX_CFG.DLL Shader functionality DCL_INDEXABLETEMP code execution vulnerability

Summary An exploitable memory corruption vulnerability exists in NVIDIA NVWGF2UMXCFG driver, versions 25.21.14.2531 and 425.31. A specially crafted pixel shader can cause an untrusted pointer dereference. An attacker can provide a specially crafted shader file to trigger this vulnerability. This...

NVIDIA NVWGF2UMX_CFG.DLL shader functionality code execution vulnerability

Summary An exploitable untrusted pointer dereference vulnerability exists in NVIDIA NVWGF2UMXCFG driver, versions 24.21.14.1216 and 412.16. A specially crafted pixel shader can cause an untrusted pointer dereference, potentially resulting in code execution. An attacker can provide a specially...

Security Bulletin: NVIDIA GPU Display Driver - August 2019

NVIDIA has released a software security update for the NVIDIA GPU Display Driver. This update addresses issues that may lead to local code execution, denial of service, or escalation of privileges. To protect your system, download and install this software update through NVIDIA Driver Downloads G...