NVIDIA Driver - No Bounds Checking in Escape 0x7000194

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=895 The DxgkDdiEscape handler for 0x7000194 doesn't do bounds checking with the user provided lengths it receives. When these lengths are passed to memcpy, overreads and memory corruption can occur. void fastcall...

NVIDIA Driver - Unchecked Write to User-Provided Pointer in Escape 0x700010d

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=894 The DxgkDdiEscape handler for 0x700010d accepts a user provided pointer as the destination for a memcpy call, without doing any checks on said pointer. void fastcall escape700010DNvMiniportDeviceContext ctx, NvEscapeData escape...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of NVIDIA’s Android operating system driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...

Android on Nexus NVIDIA Privilege Gain Vulnerability

Android on Nexus 9 is an open source operating system running on the Nexus 9 Tablet PC and based on Linux, jointly developed by Google and the Open Handset Alliance OHA.The NVIDIA media driver is a multimedia driver that is used in the Nexus 9. A privilege acquisition vulnerability exists in the...

Android NVIDIA Driver Elevation of Privilege Vulnerability

Android on Nexus 9 is a Linux-based open source operating system for the Nexus 9 Tablet PC developed by Google and the Open Handset Alliance OHA.NVIDIA video driver is a component of the NVIDIA video card driver. An elevation of privilege vulnerability exists in the NVIDIA video driver in version...

CVE-2016-3769

The NVIDIA video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28376656...

NVIDIA Windows Privilege Delegation Escalation

Lenovo Security Advisory: LEN-2015-008 Potential Impact: Escalation of Privilege Severity: Medium Summary: The NVIDIA Display Driver’s kernel administrator check improperly validates local client impersonation levels in some cases. Description: This vulnerability can only be exploited by a user...

CVE-2016-2490

The NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27533373...

CVE-2016-2445

The NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27253079...

CVE-2016-2434

The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27251090...

Input validation

The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27251090...

UBUNTU-CVE-2016-2434

The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27251090...

CVE-2016-2435

The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27297988...

CVE-2016-2558

The Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340 before 341.95 and R352 before 354.74 on Windows allows local users to obtain sensitive information, cause a denial of service crash, or gain privileges via unspecified vectors related to an untrusted...

CVE-2016-2557

The Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340 before 341.95 and R352 before 354.74 on Windows allows local users to obtain sensitive information from kernel memory, cause a denial of service crash, or possibly gain privileges via unspecified vectors,...

CVE-2016-1741

The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2016-1741

The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2016-1741

In Apple OS X, CVE-2016-1741 affects the NVIDIA Graphics Drivers component within the Graphics Drivers stack. The Apple security content for OS X El Capitan v10.11.4 and Security Update 2016-002 documents memory corruption issues in the NVIDIA/Graphics drivers that could allow an unprivileged app...

DEBIAN-CVE-2015-5053

The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346.87 and R352 before 352.41 for Linux and R352 before 352.46 for GRID vGPU and vSGA does not properly restrict access to third-party device IO memory, which allows attackers to gain privileges, cause a denial of...

Multiple Vulnerabilities in Apple OS X Graphics Drivers (CNVD-2015-07138)

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. A security vulnerability exists in the NVIDIA driver for the Graphics Drivers subsystem in versions of Apple OS X prior to 10.11.1. A local attacker exploiting this vulnerability. It c...