CVE-2019-5675: Improper Synchronization

NVIDIA Windows GPU Display driver software for Windows all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where the product does not properly synchronize shared data, such as static variables across threads, which can lead to undefined behavior a...

CVE-2019-5676: Uncontrolled Search Path Element

NVIDIA Windows GPU Display driver software for Windows all versions contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature also known as a binary planting or DLL preloading attack, leading to escalation of privileges through code...

CVE-2019-5669

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation to read from or write to a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of...

CVE-2019-5669: Improper Restriction of Operations within the Bounds of a Memory Buffer

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation to read from or write to a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of...

CVE-2019-5667: NULL Pointer Dereference

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiSetRootPageTable in which the application dereferences a pointer that it expects to be valid, but is NULL, which may lead to code execution, denial of service or escalation of...

CVE-2019-5665: Improper Link Resolution Before File Access

NVIDIA Windows GPU Display driver contains a vulnerability in the 3D vision component in which the stereo service software, when opening a file, does not check for hard links. This behavior may lead to code execution, denial of service or escalation of privileges...

PT-2019-17804

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a buffer overflow in the kernel mode layer handler for DxgkDdiEscape. Specifically, the software incorrectly uses a length value when reading...

PT-2019-17805

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a buffer overflow in the kernel mode layer handler for DxgkDdiEscape. This occurs because the software uses an incorrect length value when...

CVE-2019-5671: Missing Release of Resource after Effective Lifetime

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which the software does not release a resource after its effective lifetime has ended, which may lead to denial of service...

CVE-2019-5668: NULL Pointer Dereference

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiSubmitCommandVirtual in which the application dereferences a pointer that it expects to be valid, but is NULL, which may lead to denial of service or escalation of privileges...

PT-2019-17803

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgkDdiSubmitCommandVirtual, where the application dereferences a pointer that it expect...

PT-2019-17806

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a resource not being released after its effective lifetime has ended in the kernel mode layer handler for DxgkDdiEscape, potentially leading ...

CVE-2019-5670: Improper Restriction of Operations within the Bounds of a Memory Buffer

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation to read from or write to a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of...

CVE-2019-5666: Improper Validation of Array Index

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys create context command DDI DxgkDdiCreateContext in which the product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index...

PT-2019-17802

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgkDdiSetRootPageTable, where the application dereferences a pointer that it expects to...

PT-2019-17800

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display driver affected versions not specified Description The issue is related to the 3D vision component in the NVIDIA Windows GPU Display driver, specifically in the stereo service software. When this software opens a fil...

PT-2019-17801

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue arises from the use of untrusted input when calculating an array index in the kernel mode layer, specifically within the create context command DDI...

PT-2019-2987

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver all versions VMware ESXi, Workstation and Fusion affected versions not specified Description The issue is related to a vulnerability in DirectX drivers, specifically in the pixel shader functionality, where a...

PT-2018-17437

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue arises from a vulnerability in the kernel mode layer handler for DxgkDdiEscape. Specifically, the software incorrectly uses a length value when performing...

PT-2018-17436

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a NULL pointer dereference in the kernel mode layer handler for DxgkDdiEscape, which may lead to denial of service or possible escalation of...