CVE-2019-5692: Improper Validation of Array Index

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which the product uses untrusted input when calculating or using an array index, which may lead to escalation of privileges or denial of service...

Security Bulletin: NVIDIA GPU Display Driver - November 2019

NVIDIA has released a software security update for NVIDIA GPU Display Driver. This update addresses issues that may lead to denial of service, escalation of privileges, or information disclosure. To protect your system, download and install this software update through the NVIDIA Driver Downloads...

NVIDIA Windows GPU Display Driver License Issue Vulnerability

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Windows platform. kernel mode layer nvlddmkm.sys handler is one of the kernel mode layer handlers. A security vulnerability exists in the kernel mode layer nvlddmkm.sys handler for...

PT-2019-4368

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver all versions Description The issue is related to a vulnerability in DirectX drivers, where a specially crafted shader can cause an out of bounds access to a shader local temporary array. This may lead to denia...

PT-2019-4369

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver all versions Description The issue is related to the kernel mode layer handler for DxgkDdiEscape in the NVIDIA Windows GPU Display Driver, where the software incorrectly uses an API function or data structure...

PT-2019-4370

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver all versions Description The issue is related to an incorrect use of default permissions for an object in the kernel mode layer handler for DxgkDdiEscape, exposing it to an unintended actor. This vulnerability...

CVE-2019-5687: Incorrect Default Permissions

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which an incorrect use of default permissions for an object exposes it to an unintended actor...

CVE-2019-5686: Undefined Security Weakness

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which the software uses an API function or data structure in a way that relies on properties that are not always guaranteed to be valid, which may lead to...

CVE-2019-5685: Out-of-bounds Write

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause an out of bounds access to a shader local temporary array, which may lead to denial of service or code execution...

CVE-2019-5684: Out-of-bounds Write

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause an out of bounds access of an input texture array, which may lead to denial of service or code execution...

CVE-2019-5683: Improper Link Resolution Before File Access

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the user mode video driver trace logger component. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of...

PT-2019-17813

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver all versions Description The issue is related to the user mode video driver trace logger component, which does not check for hard link attacks. This behavior can lead to code execution, denial of service, or...

Security Bulletin: NVIDIA GPU Display Driver - August 2019

NVIDIA has released a software security update for the NVIDIA GPU Display Driver. This update addresses issues that may lead to local code execution, denial of service, or escalation of privileges. To protect your system, download and install this software update through NVIDIA Driver Downloads G...

PT-2019-4573

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display driver software for Windows all versions Description The issue is related to a buffer access mechanism in the kernel mode layer handler for DeviceIoControl, specifically in the nvlddmkm.sys software. This may lead to...

PT-2019-4574

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display driver software for Windows all versions Description The issue is related to the incorrect loading of Windows system DLLs without validating the path or signature, which can lead to escalation of privileges through...

PT-2019-4575

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display driver software for Windows all versions Description The issue is related to errors in synchronizing shared data, such as static variables across threads, in the DxgkDdiEscape function of the NVIDIA graphics processo...

CVE-2019-5677: Out-of-bounds Read

NVIDIA Windows GPU Display driver software for Windows all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DeviceIoControl where the software reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after th...

CVE-2019-5676: Uncontrolled Search Path Element

NVIDIA Windows GPU Display driver software for Windows all versions contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature also known as a binary planting or DLL preloading attack, leading to escalation of privileges through code...

CVE-2019-5675: Improper Synchronization

NVIDIA Windows GPU Display driver software for Windows all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where the product does not properly synchronize shared data, such as static variables across threads, which can lead to undefined behavior a...

NVIDIA Windows GPU Display Driver Privilege License and Access Control Issues Vulnerability

The NVIDIA Windows GPU Display Driver is a display driver for Windows systems. A vulnerability exists in the 3D visual component of the NVIDIA Windows GPU display driver. The vulnerability stems from the Stereo Services software not checking for hard links when opening files. An attacker could us...