CVE-2021-1116

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys, where a NULL pointer dereference in the kernel, created within user mode code, may lead to a denial of service in the form of a system crash...

CVE-2021-1115

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for private IOCTLs, where an attacker with local unprivileged system access may cause a NULL pointer dereference, which may lead to denial of service in a component beyond the vulnerable...

CVE-2021-1116

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys, where a NULL pointer dereference in the kernel, created within user mode code, may lead to a denial of service in the form of a system crash...

CVE-2021-1116

CVE-2021-1116 affects NVIDIA GPU Display Driver for Windows, with a vulnerability in nvlddmkm.sys where a NULL pointer dereference in kernel mode, created from user-mode code, may crash the system (DoS). Exploitation is local; impact is system crash/denial of service. Remediation is available: NV...

CVE-2021-1115

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for private IOCTLs, where an attacker with local unprivileged system access may cause a NULL pointer dereference, which may lead to denial of service in a component beyond the vulnerable...

CVE-2021-1115

CVE-2021-1115 affects the NVIDIA GPU Display Driver for Windows, specifically the kernel-mode layer (nvlddmkm.sys) handling of private IOCTLs. The bug is a NULL pointer dereference in the kernel, exploitable by a local unprivileged user and may cause a denial of service in a component beyond the ...

dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parse_write_buffer_into_params when it uses the size of copy_from_user to copy a userspace buffer into a 40-byte heap buffer.

...

openSUSE: Security Advisory for virtualbox (openSUSE-SU-2021:1393-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

NVIDIA Windows GPU Display Driver 代码问题漏洞

Nvidia NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver for the Windows platform from Nvidia, Inc. The NVIDIA Windows GPU Display Driver is vulnerable to a code issue that arises from improper management of system resources e.g., memory, disk space, files, etc. b...

The vulnerability of the hw/display/ati_2d.c component in the hardware/display/ati_2d emulation software by QEMU, due to incorrect calculations, allows a hacker to trigger a service failure.

The vulnerability of the hw/display/ati2d.c component in the hardware/display/ati2d emulator of QEMU is related to incorrect calculations. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows attackers to access confidential information or cause service failures.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information or cause service failures...

NewStart CGSL CORE 5.05 / MAIN 5.05 : spice Vulnerability (NS-SA-2021-0165)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has spice packages installed that are affected by a vulnerability: - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPI...

NewStart CGSL CORE 5.05 / MAIN 5.05 : spice-gtk Vulnerability (NS-SA-2021-0164)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has spice-gtk packages installed that are affected by a vulnerability: - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the...

kernel: use-after-free in show_numa_stats function

A flaw was found in the Linux kernel’s implementation of displaying NUMA statistics, where displaying the scheduler statistics could trigger a use-after-free in shownumastats and display the kernel memory to userspace. The highest threat from this vulnerability is to system availability...

Security Bulletin: NVIDIA GPU Display Driver - October 2021

NVIDIA has released a software security update for NVIDIA GPU Display Driver. This update addresses issues that may lead to multiple security impacts. To protect your system, download and install this software update through the NVIDIA Driver Downloads page or, for the vGPU software update, throu...

October 26, 2021—KB5006738 (OS Builds 19041.1320, 19042.1320, and 19043.1320) Preview

None None...

CVE-2021-0633

In display driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05585423; Issue ID: ALPS05585423...

CVE-2021-0633

In display driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05585423; Issue ID: ALPS05585423...

CVE-2021-0634

In display driver, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05594994; Issue ID: ALPS05594994...

CVE-2021-0634

In display driver, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05594994; Issue ID: ALPS05594994...