NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2016-12899)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A security vulnerability exists in the kernel mode layer processor of DxgDdiEscape in all versions of the NVIDIA Windows GPU Display Driver, which arises from a failure of the progr...

Design/Logic Flaw

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where a value passed from a user to the driver is used without validation as the index to an array, leading to denial of service or potential escalation of...

CVE-2016-8826

All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys for Windows or nvidia.ko for Linux where a user can cause a GPU interrupt storm, leading to a denial of service...

CVE-2016-8822

CVE-2016-8822 concerns the NVIDIA Windows GPU Display Driver (nvlddmkm.sys). The vulnerability exists in the kernel-mode layer handler for DxgDdiEscape IDs 0x600000E, 0x600000F, and 0x6000010, where a value supplied by a user is used as an index into an internal array without proper validation, e...

CVE-2016-8815

CVE-2016-8815 affects all versions of the NVIDIA Windows GPU Display Driver. The kernel-mode driver (nvlddmkm.sys) in the DxgDdiEscape path uses a user-supplied value as an array index without validation, enabling either denial of service or potential privilege escalation. Documents consistently ...

PT-2016-7584

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgDdiEscape, where a value passed from a user to the driver is used without validation ...

PT-2016-7590

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to improper access controls in the kernel mode layer handler for DxgDdiEscape, which may allow a user to access arbitrary physical memory. This...

CVE-2016-8824: Improper Access Control

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where improper access controls allow a regular user to write a part of the registry intended for privileged users only, leading to escalation of privileges...

PT-2016-7588

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgkDdiEscape, where a handle to a kernel object may be returned to the user. This could...

PT-2016-7585

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgDdiEscape, where a value passed from a user to the driver is used without validation ...

CVE-2016-8820: Improper Input Validation

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where a check on a function return value is missing, potentially allowing an uninitialized value to be used as the source of a strcpy call, leading to denial of...

CVE-2016-8813: NULL Pointer Dereference

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where multiple pointers are used without checking for NULL, leading to denial of service or potential escalation of privileges...

CVE-2016-8816: Improper Validation of Array Index

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where a value passed from a user to the driver is used without validation as the index to an array, leading to denial of service or potential escalation of...

CVE-2016-8819: Missing Release of File Descriptor or Handle after Effective Lifetime

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where a handle to a kernel object may be returned to the user, leading to possible denial of service or escalation of privileges...

PT-2016-7593

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to improper access controls in the kernel mode layer handler for DxgDdiEscape, allowing a regular user to write to a part of the registry intend...

PT-2016-7583

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgDdiEscape, where multiple pointers are used without checking for NULL. This can lead ...

PT-2016-7586

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgDdiEscape, where a value passed from a user to the driver is used without validation ...

CVE-2016-8814: NULL Pointer Dereference

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where multiple pointers are used without checking for NULL, leading to denial of service or potential escalation of privileges...

PT-2016-7594

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver versions affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgDdiEscape, where the size of an input buffer is not validated. This can lead...

PT-2016-7591

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for specific DxgDdiEscape IDs. A value passed from a user to the driver is used without...