Command injection

nvSCPAPISvr.exe in the Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows does not properly restrict access to the stereosvrpipe named pipe, which allows local users to gain privileges via a commandline in a...

CVE-2015-5053

The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346.87 and R352 before 352.41 for Linux and R352 before 352.46 for GRID vGPU and vSGA does not properly restrict access to third-party device IO memory, which allows attackers to gain privileges, cause a denial of...

CVE-2015-7866

Unquoted Windows search path vulnerability in the Smart Maximize Helper nvSmartMaxApp.exe in the Control Panel in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows allows local users to gain privileges via a Trojan horse application, as...

CVE-2015-5053

The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346.87 and R352 before 352.41 for Linux and R352 before 352.46 for GRID vGPU and vSGA does not properly restrict access to third-party device IO memory, which allows attackers to gain privileges, cause a denial of...

CVE-2015-7869

Multiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows and R304 before 304.131, R340 before 340.96, R352 before 352.63, and R358 before 358.16 on Linux allow local users to obtain sensitive...

CVE-2015-7866

CVE-2015-7866 describes an unquoted Windows search path vulnerability in the NVIDIA GPU graphics driver control panel component nvSmartMaxApp.exe. A local attacker could exploit this to escalate privileges, demonstrated by using a Trojan horse named C:\Program.exe. The affected products are NVIDI...

CVE-2015-8328

Unspecified vulnerability in the NVAPI support layer in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows allows local users to obtain sensitive information, cause a denial of service crash, or possibly gain privileges via unknown vectors...

PT-2015-7763

Name of the Vulnerable Software and Affected Versions NVIDIA GPU graphics driver versions prior to 341.92 NVIDIA GPU graphics driver versions prior to 354.35 NVIDIA GPU graphics driver versions prior to 358.87 Description The issue allows local users to obtain sensitive information, cause a denia...

CVE-2015-7865: Improper Access Control

nvSCPAPISvr.exe in the Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows does not properly restrict access to the stereosvrpipe named pipe, which allows local users to gain privileges via a commandline in a...

CVE-2015-7866: Undefined Security Weakness

Unquoted Windows search path vulnerability in the Smart Maximize Helper nvSmartMaxApp.exe in the Control Panel in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows allows local users to gain privileges via a Trojan horse application, as...

CVE-2015-8328: Improper Restriction of Operations within the Bounds of a Memory Buffer

Unspecified vulnerability in the NVAPI support layer in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows allows local users to obtain sensitive information, cause a denial of service crash, or possibly gain privileges via unknown vectors...

CVE-2015-7869: Undefined Security Weakness

Multiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows and R304 before 304.131, R340 before 340.96, R352 before 352.63, and R358 before 358.16 on Linux allow local users to obtain sensitive...

CVE-2015-5053: Improper Access Control

The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346.87 and R352 before 352.41 for Linux and R352 before 352.46 for GRID vGPU and vSGA does not properly restrict access to third-party device IO memory, which allows attackers to gain privileges, cause a denial of...

PT-2015-2748

Name of the Vulnerable Software and Affected Versions NVIDIA GPU graphics driver versions prior to 341.92 NVIDIA GPU graphics driver versions prior to 354.35 NVIDIA GPU graphics driver versions prior to 358.87 Description The issue is related to an unquoted Windows search path vulnerability in th...

PT-2015-2747

Name of the Vulnerable Software and Affected Versions NVIDIA GPU graphics driver versions R340 through 341.92 NVIDIA GPU graphics driver versions R352 through 354.35 NVIDIA GPU graphics driver versions R358 through 358.87 Description The issue is related to insufficient access control in the...

PT-2015-2749

Name of the Vulnerable Software and Affected Versions NVIDIA GPU graphics driver versions R340 through 341.92 NVIDIA GPU graphics driver versions R352 through 354.35 NVIDIA GPU graphics driver versions R358 through 358.87 NVIDIA GPU graphics driver versions R304 through 304.131 NVIDIA GPU graphic...

CVE-2015-7869

Multiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows and R304 before 304.131, R340 before 340.96, R352 before 352.63, and R358 before 358.16 on Linux allow local users to obtain sensitive...

PT-2015-2735

Name of the Vulnerable Software and Affected Versions NVIDIA GPU graphics driver versions prior to 346.87 NVIDIA GPU graphics driver versions prior to 352.41 for Linux NVIDIA GPU graphics driver versions prior to 352.46 for GRID vGPU and vSGA Description The issue is related to inadequate access...

NVIDIA GPU for FreeBSD Driver Vulnerability

FreeBSD is a type of UNIX operating system, an important branch of Unix that evolved from BSD, 386BSD and 4.4BSD. A security vulnerability exists in the NVIDIA GPU for FreeBSD driver, which can be exploited by a local attacker to write or read arbitrary kernel memory with certain privileges...

CVE-2015-3625

The NVIDIA GPU driver for FreeBSD R352 before 352.09, 346 before 346.72, R349 before 349.16, R343 before 343.36, R340 before 340.76, R337 before 337.25, R334 before 334.21, R331 before 331.113, and R304 before 304.125 allows local users with certain permissions to read or write arbitrary kernel...