HPSBHF03690 rev. 3 - NVIDIA GPU Display Driver September 2020 Security Updates

Potential Security Impact Escalation of Privilege, Code Execution, Denial of Service, Information Disclosure. Source: HP, HP Product Security Response Team PSRT Reported By: NVIDIA VULNERABILITY SUMMARY NVIDIA has informed HP of potential security vulnerabilities in the NVIDIA GPU Display Driver...

NVIDIA Linux GPU Display (June 2020)

The NVIDIA GPU display driver software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities: - A code execution vulnerability exists in the Inter Process Communication APIs due to improper access control. An authenticated, local attacker can...

NVIDIA Windows GPU Display Driver Code Issue Vulnerability (CNVD-2021-27728)

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Windows platform. kernel mode layer nvlddmkm.sys handler is one of the kernel mode layer handlers. A code issue vulnerability exists in the kernel mode layer nvlddmkm.sys handler...

Security Bulletin: NVIDIA Windows GPU Display Driver has resolved several security vulnerabilities as described below.

Summary The NVIDIA Windows GPU Display Driver has resolved several security vulnerabilities as described by the following CVEs: Vulnerability Details CVEID: CVE-2019-5683 DESCRIPTION: Nvidia Windows GPU Display Driver could allow a local authenticated attacker to gain elevated privileges on the...

CVE-2020-5965

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver nvwgf2um/x.dll, in which a specially crafted shader can cause an out of bounds access, leading to denial of service...

CVE-2020-5963

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure...

PT-2020-18855

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions Description The issue is related to a vulnerability in the service host component of the NVIDIA Windows GPU Display Driver, where the application resources integrity check may be missed. This cou...

PT-2020-18857

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions Description The issue is related to a vulnerability in the kernel mode layer handler for DxgkDdiEscape, where a NULL pointer is dereferenced. This can lead to denial of service or potential...

CVE-2020-5965: Out-of-bounds Read

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver nvwgf2um/x.dll, in which a specially crafted shader can cause an out of bounds access, leading to denial of service...

CVE-2020-5963: Undefined Security Weakness

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure...

CVE-2020-5964: Insufficient Verification of Data Authenticity

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure...

CVE-2020-5966: NULL Pointer Dereference

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape, in which a NULL pointer is dereferenced, leading to denial of service or potential escalation of privileges...

CVE-2020-5967: Concurrent Execution using Shared Resource with Improper Synchronization

NVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in which a race condition may lead to a denial of service...

PT-2020-18856

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions Description The issue is related to a vulnerability in the DirectX 11 user mode driver, specifically in the nvwgf2um/x.dll component. It can be triggered by a specially crafted shader, leading to...

PT-2020-5801

Name of the Vulnerable Software and Affected Versions: NVIDIA Windows GPU Display Driver, all versions Description: The issue is related to improper access control in the Inter Process Communication APIs of the NVIDIA Windows GPU Display Driver. This may lead to code execution, denial of service,...

PT-2020-5741

Name of the Vulnerable Software and Affected Versions: NVIDIA Linux GPU Display Driver, all versions Description: The issue is related to a race condition in the UVM driver, which may lead to a denial of service. This is due to concurrent execution using a shared resource with improper...

Security Bulletin: NVIDIA GPU Display Driver - June 2020

NVIDIA has released a software security update for NVIDIA GPU Display Driver. This update addresses issues that may lead to denial of service, escalation of privileges, or information disclosure. To protect your system, download and install this software update through the NVIDIA Driver Downloads...

CVE-2020-5962: Undefined Security Weakness

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component, in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges...

PT-2020-18854

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions Description The issue concerns a vulnerability in the NVIDIA Control Panel component. An attacker with local system access can corrupt a system file, potentially leading to denial of service or...

Security Bulletin: NVIDIA Windows and Linux GPU Display drivers are have resolved several security vulnerabilities as described below.

Summary The NVIDIA Windows and Linux GPU Display drivers have resolved several ecurity vulnerabilities as described by the following CVEs: Vulnerability Details CVEID: CVE-2019-5690 DESCRIPTION: NVIDIA Windows GPU Display driver could allow a local authenticated attacker to gain elevated privileg...