CVE-2019-5690: Out-of-bounds Write

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which the size of an input buffer is not validated, which may lead to denial of service or escalation of privileges...

Design/Logic Flaw

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which the software uses an API function or data structure in a way that relies on properties that are not always guaranteed to be valid, which may lead to...

PT-2019-4370

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver all versions Description The issue is related to an incorrect use of default permissions for an object in the kernel mode layer handler for DxgkDdiEscape, exposing it to an unintended actor. This vulnerability...

CVE-2019-5686: Undefined Security Weakness

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which the software uses an API function or data structure in a way that relies on properties that are not always guaranteed to be valid, which may lead to...

PT-2019-4369

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver all versions Description The issue is related to the kernel mode layer handler for DxgkDdiEscape in the NVIDIA Windows GPU Display Driver, where the software incorrectly uses an API function or data structure...

CVE-2019-5683: Improper Link Resolution Before File Access

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the user mode video driver trace logger component. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of...

PT-2019-17813

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver all versions Description The issue is related to the user mode video driver trace logger component, which does not check for hard link attacks. This behavior can lead to code execution, denial of service, or...

CVE-2019-5684: Out-of-bounds Write

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause an out of bounds access of an input texture array, which may lead to denial of service or code execution...

CVE-2019-5687: Incorrect Default Permissions

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which an incorrect use of default permissions for an object exposes it to an unintended actor...

PT-2019-4368

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver all versions Description The issue is related to a vulnerability in DirectX drivers, where a specially crafted shader can cause an out of bounds access to a shader local temporary array. This may lead to denia...

CVE-2019-5685: Out-of-bounds Write

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause an out of bounds access to a shader local temporary array, which may lead to denial of service or code execution...

CVE-2019-5675

NVIDIA Windows GPU Display driver software for Windows all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where the product does not properly synchronize shared data, such as static variables across threads, which can lead to undefined behavior a...

PT-2019-4574

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display driver software for Windows all versions Description The issue is related to the incorrect loading of Windows system DLLs without validating the path or signature, which can lead to escalation of privileges through...

PT-2019-4575

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display driver software for Windows all versions Description The issue is related to errors in synchronizing shared data, such as static variables across threads, in the DxgkDdiEscape function of the NVIDIA graphics processo...

CVE-2019-5677: Out-of-bounds Read

NVIDIA Windows GPU Display driver software for Windows all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DeviceIoControl where the software reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after th...

CVE-2019-5675: Improper Synchronization

NVIDIA Windows GPU Display driver software for Windows all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where the product does not properly synchronize shared data, such as static variables across threads, which can lead to undefined behavior a...

CVE-2019-5676: Uncontrolled Search Path Element

NVIDIA Windows GPU Display driver software for Windows all versions contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature also known as a binary planting or DLL preloading attack, leading to escalation of privileges through code...

PT-2019-4573

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display driver software for Windows all versions Description The issue is related to a buffer access mechanism in the kernel mode layer handler for DeviceIoControl, specifically in the nvlddmkm.sys software. This may lead to...

Design/Logic Flaw

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys create context command DDI DxgkDdiCreateContext in which the product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index...

Out-of-bounds

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation to read from or write to a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of...