PT-2019-17820

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, R390 driver version Description The issue arises from the incorrect loading of Windows system DLLs by the NVIDIA Control Panel without proper validation of the path or signature, making it susceptible to a...

PT-2019-17816

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions Description The issue concerns a vulnerability in the kernel mode layer handler for DxgkDdiEscape, specifically within the nvlddmkm.sys module. The problem arises because the size of an input...

CVE-2019-5690: Out-of-bounds Write

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which the size of an input buffer is not validated, which may lead to denial of service or escalation of privileges...

CVE-2019-5691: NULL Pointer Dereference

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which a NULL pointer is dereferenced, which may lead to denial of service or escalation of privileges...

CVE-2019-5694: Uncontrolled Search Path Element

NVIDIA Windows GPU Display Driver, R390 driver version, contains a vulnerability in NVIDIA Control Panel in which it incorrectly loads Windows system DLLs without validating the path or signature also known as a binary planting or DLL preloading attack, which may lead to denial of service or...

CVE-2019-5693: Access of Uninitialized Pointer

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys in which the program accesses or uses a pointer that has not been initialized, which may lead to denial of service...

CVE-2019-5692: Improper Validation of Array Index

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which the product uses untrusted input when calculating or using an array index, which may lead to escalation of privileges or denial of service...

PT-2019-4370

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver all versions Description The issue is related to an incorrect use of default permissions for an object in the kernel mode layer handler for DxgkDdiEscape, exposing it to an unintended actor. This vulnerability...

CVE-2019-5683: Improper Link Resolution Before File Access

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the user mode video driver trace logger component. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of...

CVE-2019-5686: Undefined Security Weakness

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which the software uses an API function or data structure in a way that relies on properties that are not always guaranteed to be valid, which may lead to...

CVE-2019-5685: Out-of-bounds Write

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause an out of bounds access to a shader local temporary array, which may lead to denial of service or code execution...

PT-2019-4368

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver all versions Description The issue is related to a vulnerability in DirectX drivers, where a specially crafted shader can cause an out of bounds access to a shader local temporary array. This may lead to denia...

PT-2019-4369

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver all versions Description The issue is related to the kernel mode layer handler for DxgkDdiEscape in the NVIDIA Windows GPU Display Driver, where the software incorrectly uses an API function or data structure...

PT-2019-17813

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver all versions Description The issue is related to the user mode video driver trace logger component, which does not check for hard link attacks. This behavior can lead to code execution, denial of service, or...

CVE-2019-5684: Out-of-bounds Write

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause an out of bounds access of an input texture array, which may lead to denial of service or code execution...

CVE-2019-5687: Incorrect Default Permissions

NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which an incorrect use of default permissions for an object exposes it to an unintended actor...

PT-2019-4573

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display driver software for Windows all versions Description The issue is related to a buffer access mechanism in the kernel mode layer handler for DeviceIoControl, specifically in the nvlddmkm.sys software. This may lead to...

PT-2019-4574

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display driver software for Windows all versions Description The issue is related to the incorrect loading of Windows system DLLs without validating the path or signature, which can lead to escalation of privileges through...

PT-2019-4575

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display driver software for Windows all versions Description The issue is related to errors in synchronizing shared data, such as static variables across threads, in the DxgkDdiEscape function of the NVIDIA graphics processo...

CVE-2019-5677: Out-of-bounds Read

NVIDIA Windows GPU Display driver software for Windows all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DeviceIoControl where the software reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after th...