11944 matches found
Null pointer dereference
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which a NULL pointer is dereferenced, which may lead to denial of service or escalation of privileges...
Design/Logic Flaw
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which the product uses untrusted input when calculating or using an array index, which may lead to escalation of privileges or denial of service...
CVE-2019-5694
CVE-2019-5694 affects NVIDIA Windows GPU Display Driver via the NVIDIA Control Panel loading Windows DLLs without path/signature validation (binary planting). Local attacker access required; impact includes denial of service or information disclosure with potential for code execution. From the pr...
CVE-2019-5694
NVIDIA Windows GPU Display Driver, R390 driver version, contains a vulnerability in NVIDIA Control Panel in which it incorrectly loads Windows system DLLs without validating the path or signature also known as a binary planting or DLL preloading attack, which may lead to denial of service or...
CVE-2019-5693
CVE-2019-5693 affects NVIDIA Windows GPU Display Driver – nvlddmkm.sys – with an uninitialized pointer in the kernel mode layer, potentially causing denial of service. Public details across sources indicate affected Windows drivers and listed mitigations/updates: Windows updates to 441.12 (exampl...
CVE-2019-5693
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys in which the program accesses or uses a pointer that has not been initialized, which may lead to denial of service...
CVE-2019-5692
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which the product uses untrusted input when calculating or using an array index, which may lead to escalation of privileges or denial of service...
CVE-2019-5692
CVE-2019-5692 affects NVIDIA Windows GPU Display Driver (kernel mode nvlddmkm.sys) in the DxgkDdiEscape handler, where untrusted input is used to compute an array index, potentially enabling local privilege escalation or denial of service. Connected sources confirm an NVIDIA Windows driver vulner...
CVE-2019-5691
CVE-2019-5691 : NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel-mode nvlddmkm.sys DxgkDdiEscape handler where a NULL pointer is dereferenced, potentially enabling denial of service or privilege escalation. Affected product: NVIDIA Windows GPU Display Driver (Windows). Und...
CVE-2019-5691
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which a NULL pointer is dereferenced, which may lead to denial of service or escalation of privileges...
CVE-2019-5690
CVE-2019-5690 affects NVIDIA Windows GPU Display Driver via the nvlddmkm.sys DxgkDdiEscape handler, where input buffer size is not validated, potentially enabling denial of service or privilege escalation. Public details confirm affected products as NVIDIA Windows GPU Display Driver (Windows) and...
CVE-2019-5690
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which the size of an input buffer is not validated, which may lead to denial of service or escalation of privileges...
CVE-2010-2472
Locale module and dependent contributed modules in Drupal 6.x before 6.16 and 5.x before version 5.22 do not sanitize the display of language codes, native and English language names properly which could allow an attacker to perform a cross-site scripting XSS attack. This vulnerability is mitigat...
UBUNTU-CVE-2019-18810
A memory leak in the komedawbconnectoradd function in drivers/gpu/drm/arm/display/komeda/komedawbconnector.c in the Linux kernel before 5.3.8 allows attackers to cause a denial of service memory consumption by triggering drmwritebackconnectorinit failures, aka CID-a0ecd6fdbf5d...
QEMU: qxl: null pointer dereference while releasing spice resources
interfacereleaseresource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference...
CVE-2017-3735
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g...
Security Bulletin: NVIDIA GPU Display Driver - November 2019
NVIDIA has released a software security update for NVIDIA GPU Display Driver. This update addresses issues that may lead to denial of service, escalation of privileges, or information disclosure. To protect your system, download and install this software update through the NVIDIA Driver Downloads...
openssh: Missing character encoding in progress display allows for spoofing of scp client output
An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server or Man-in-The-Middle attacker can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This...
kernel: unchecked kstrdup of fwstr in drm_load_edid_firmware leads to denial of service
A flaw was found in the Linux kernel’s implementation of Extended Display Identification Data EDID technology. A firmware identifier string is duplicated with the kstrdup function, and the allocation may fail under very low memory conditions. An attacker could abuse this flaw by causing a Denial ...