CVE-2019-5693

CVE-2019-5693 affects NVIDIA Windows GPU Display Driver – nvlddmkm.sys – with an uninitialized pointer in the kernel mode layer, potentially causing denial of service. Public details across sources indicate affected Windows drivers and listed mitigations/updates: Windows updates to 441.12 (exampl...

CVE-2019-5692

CVE-2019-5692 affects NVIDIA Windows GPU Display Driver (kernel mode nvlddmkm.sys) in the DxgkDdiEscape handler, where untrusted input is used to compute an array index, potentially enabling local privilege escalation or denial of service. Connected sources confirm an NVIDIA Windows driver vulner...

CVE-2019-5694

CVE-2019-5694 affects NVIDIA Windows GPU Display Driver via the NVIDIA Control Panel loading Windows DLLs without path/signature validation (binary planting). Local attacker access required; impact includes denial of service or information disclosure with potential for code execution. From the pr...

CVE-2019-5690

CVE-2019-5690 affects NVIDIA Windows GPU Display Driver via the nvlddmkm.sys DxgkDdiEscape handler, where input buffer size is not validated, potentially enabling denial of service or privilege escalation. Public details confirm affected products as NVIDIA Windows GPU Display Driver (Windows) and...

CVE-2019-5691

CVE-2019-5691 : NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel-mode nvlddmkm.sys DxgkDdiEscape handler where a NULL pointer is dereferenced, potentially enabling denial of service or privilege escalation. Affected product: NVIDIA Windows GPU Display Driver (Windows). Und...

CVE-2021-1052

NVIDIA GPU Display Driver (Windows and Linux) contains CVE-2021-1052 in the kernel-mode layer (nvlddmkm.sys / nvidia.ko) via DxgkDdiEscape/IOCTL, allowing user-mode clients to access legacy privileged APIs, risking DoS, privilege escalation, and information disclosure. Related CVEs 1053 (state: i...

CVE-2021-1056

CVE-2021-1056 affects NVIDIA GPU Display Driver for Linux (kernel mode layer nvidia.ko). A local attacker could exploit improper handling of OS filesystem permissions to break GPU device isolation, potentially causing denial of service or information disclosure. Public details in connected docume...

CVE-2019-5684

CVE-2019-5684 affects the NVIDIA Windows GPU Display Driver for Windows. The vulnerability is in the DirectX shader path and can cause an out-of-bounds access (as described in NVD) or out-of-bounds write (per IBM’s vulnerability details), potentially enabling denial of service or arbitrary code e...

CVE-2021-1051

CVE-2021-1051 concerns NVIDIA's Windows GPU Display Driver where the kernel-mode nvlddmkm.sys handler for DxgkDdiEscape allows a local user to elevate privileges to modify display configuration data, potentially causing display DoS. The vulnerability affects the NVIDIA GPU Display Driver and is a...

CVE-2021-1053

CVE-2021-1053 affects NVIDIA GPU Display Driver for Windows and Linux (all versions). The kernel-mode layer (nvlddmkm.sys) handles DxgkDdiEscape or IOCTL and may improperly validate a user pointer, resulting in a denial of service. Public technical detail across connected documents confirms the a...

CVE-2019-5677

CVE-2019-5677 affects the NVIDIA Windows GPU Display Driver (kernel mode nvlddmkm.sys) with a memory-bounds read issue in the DeviceIoControl handler that can lead to denial of service. Public documents consistently describe the issue as local, and that exploitation causes application/system cras...

CVE-2021-1054

CVE-2021-1054 : NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel-mode layer (nvlddmkm.sys) DxgkDdiEscape handler where an actor’s access attempt may bypass/violate authorization checks, potentially causing a Denial of Service. The issue affects Windows NVIDIA GPU Displ...

CVE-2019-5675

CVE-2019-5675 affects NVIDIA Windows GPU Display Driver for Windows (nvlddmkm.sys) with the DxgkDdiEscape handler. The root cause is improper synchronization of shared data across threads, causing undefined behavior that can lead to denial of service, escalation of privileges, or information disc...

CVE-2021-1055

CVE-2021-1055 affects the NVIDIA GPU Display Driver for Windows (nvlddmkm.sys) where the DxgkDdiEscape handler has improper access control in kernel mode, potentially causing local DoS and information disclosure. Affected: Windows NVIDIA GPU Display Driver (all versions). Mitigation: install the ...

CVE-2019-5683

CVE-2019-5683 affects NVIDIA Windows GPU Display Driver (all versions) via the user-mode video driver trace logger. The issue arises when a local attacker with system access creates a hard link and the driver fails to detect hard-link attacks, potentially enabling code execution, denial of servic...

CVE-2019-5695

The CVE-2019-5695 issue concerns NVIDIA GeForce Experience (pre-3.20.1) and Windows GPU Display Driver across all versions, where the local service provider component improperly loads Windows system DLLs without path/signature validation (a DLL preloading/binary planting flaw). This can enable a ...

CVE-2018-6260

Summary (CVE-2018-6260) NVIDIA’s GPU Display Driver contains a local-information-disclosure vulnerability due to a side channel exposed by GPU performance counters. A local attacker could access data processed on the GPU. The flaw affects NVIDIA Display Driver for Linux and Windows; no remote/vec...

CVE-2019-5685

Affected software: NVIDIA Windows GPU Display Driver for Windows. Vulnerability: DirectX shader processing flaw can cause an out-of-bounds access/write to a shader local temporary array, potentially enabling denial of service or arbitrary code execution. Root cause: out-of-bounds handling in shad...

CVE-2019-5687

CVE-2019-5687 affects the NVIDIA Windows GPU Display Driver (kernel mode nvlddmkm.sys) with a flaw in the DxgkDdiEscape handler caused by an incorrect use of default permissions, exposing an object to an unintended actor. The vulnerability is documented across multiple sources (NVD entry, Red Hat...

CVE-2019-5686

The CVE-2019-5686 issue affects NVIDIA Windows GPU Display Driver for Windows, specifically the kernel-mode nvlddmkm.sys DxgkDdiEscape handler. The vulnerability arises from using an API function or data structure in a way that relies on properties not always guaranteed to be valid, which can lea...

CVE-2013-5987

CVE-2013-5987 relates to a local privilege-escalation bug in NVIDIA Graphics Drivers where unprivileged user-mode software could access the GPU and gain elevated privileges due to a failure to restrict access to the GPU. The IBM bulletin lists affected NVIDIA products and confirms a repair path v...

CVE-2017-6266

CVE-2017-6266 affects the NVIDIA GPU Display Driver’s kernel mode layer handler, where improper access controls could allow unprivileged users to cause a denial of service. Connected advisories note related CVEs (6267, 6272) and indicate upstream fixes; for example, Arch Linux ASA-201709-22 fixes...

CVE-2017-0350

CVE-2017-0350 affects NVIDIA GPU Display Driver. A vulnerability in the kernel mode layer handler arises from improper validation of user-supplied values used in offset calculations, potentially enabling denial of service or privilege escalation. In affected Linux drivers, versions 375.x prior to...

CVE-2017-0341

CVE-2017-0341 affects the NVIDIA Windows GPU Display Driver (kernel mode layer nvlddmkm.sys) in DxgDdiEscape, where user input can trigger an access to an uninitialized pointer, potentially causing denial of service or privilege escalation. The connected material also documents related CVEs (0342...

CVE-2015-7866

CVE-2015-7866 describes an unquoted Windows search path vulnerability in the NVIDIA GPU graphics driver control panel component nvSmartMaxApp.exe. A local attacker could exploit this to escalate privileges, demonstrated by using a Trojan horse named C:\Program.exe. The affected products are NVIDI...

CVE-2013-5986

CVE-2013-5986 is referenced in Gentoo GLSA 201402-02, which notes a vulnerability caused by the driver allowing unprivileged user‑mode software to access the GPU. Other provided documents do not specify product/vendor/version details or remediation for this CVE.

CVE-2016-7382

The CVE-2016-7382 issue affects NVIDIA GPUs (Quadro, NVS, GeForce, Tesla) with the GPU Display Driver. It is a kernel-mode vulnerability in the driver’s nvlddmkm.sys (Windows) / nvidia.ko (Linux) handler where a missing permissions check can allow an attacker to access arbitrary physical memory, ...

CVE-2017-0318

CVE-2017-0318 affects all versions of the NVIDIA Linux GPU Display Driver. The vulnerability is in the kernel mode layer handler, where improper validation of an input parameter may cause a denial of service on the system. No specific patch/version/fix is provided in the connected documents; deta...

CVE-2017-0321

CVE-2017-0321 affects NVIDIA GPU Display Driver kernels in both Linux and Windows, caused by a NULL pointer dereference in the kernel mode layer handler when given invalid user input. The vulnerability may allow a local attacker to cause a denial of service and potentially escalate privileges. Pu...

CVE-2017-0323

CVE-2017-0323 affects NVIDIA Windows GPU Display Driver. The provided documents describe a vulnerability in the kernel-mode layer handler (nvlddmkm.sys) where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential privilege escalation. The incident is d...

CVE-2017-6251

CVE-2017-6251 affects the NVIDIA Windows GPU Display Driver, specifically the kernel mode layer handler (nvlddmkm.sys). The root cause is a missing permissions check, allowing a user to access arbitrary physical system memory and potentially escalate privileges. Public connected documentation con...

CVE-2017-0309

NVIDIA GPU Display Driver is affected (Linux and Windows) by CVE-2017-0309 and related CVEs due to integer overflows in the kernel mode layer handler, causing denial of service and potential privilege escalation. Linux driver lines: 304.x<304.135, 340.x<340.102, 361.x<361.119, 375.x<3...

CVE-2017-0352

NVIDIA GPU Display Driver vulnerability (CVE-2017-0352) affects all versions of the NVIDIA GPU Display Driver. The issue is in the GPU firmware with incorrect access control that may permit CPU access to sensitive GPU control registers, enabling local privilege escalation. Multiple connected sour...

CVE-2018-6251

CVE-2018-6251 affects the NVIDIA Windows GPU Display Driver, specifically the DirectX 10 Usermode driver. A specially crafted pixel shader can cause writing to unallocated memory, leading to denial of service or potential code execution. This vulnerability is reported across multiple feeds (NVD, ...

CVE-2013-0131

CVE-2013-0131 affects the NVIDIA GPU driver for the X Window System on UNIX, where buffer overflow in NoScanout ARGB cursor handling allows remote authenticated users to execute arbitrary code. The vulnerability spans multiple driver branches (pre-304.88, 310.x pre-310.44, 313.x pre-313.30). In p...

CVE-2017-0311

CVE-2017-0311 : NVIDIA GPU Display Driver R378 contains a vulnerability in the kernel mode layer handler where improper access control may lead to denial of service or possible escalation of privileges. A local attacker could exploit this with low attack complexity (LOCAL vector, no authenticatio...

CVE-2017-0312

The CVE-2017-0312 issue affects the NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in the DxgkDdiEscape handler for ID 0x100008b. A user-supplied value is used as the loop limit, enabling denial of service or potential privilege escalation. Affected driver branches include 375.x (prior to 376.6...

CVE-2017-0313

CVE-2017-0313 affects the NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in the SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual). The issue is an out-of-bounds/read/write condition caused by untrusted input referencing memory outside the buffer, leading to denial of service or local privi...

CVE-2017-6257

CVE-2017-6257 affects the NVIDIA GPU Display Driver (kernel-mode layer handler). The vulnerability is a NULL pointer dereference that can cause a denial of service or potentially escalate privileges. It is described as a local‑impact issue with low attack complexity (local access, no user interac...

CVE-2017-0315

CVE-2017-0315 affects the NVIDIA Windows GPU Display Driver. The issue resides in the kernel-mode layer handler nvlddmkm.sys, specifically the DxgkDdiEscape path, where an attempt to access an invalid object pointer can cause denial of service or potentially escalate privileges. It is described a...

CVE-2017-6267

NVIDIA GPU Display Driver kernels-mode layer handler contains a vulnerability (CVE-2017-6267) where improper initialization of internal objects can cause an infinite loop, leading to denial of service. The issue affects NVIDIA graphics drivers; Arch Linux ASAs and related advisories note the fixe...

CVE-2018-6253

CVE-2018-6253 affects NVIDIA GPU Display Driver with a flaw in the DirectX and OpenGL Usermode drivers: a specially crafted pixel shader can cause infinite recursion, leading to denial of service. The vulnerability is detailed across multiple disclosures (NVD CVSS 2.0/3.0 showing MEDIUM base seve...

CVE-2019-5670

CVE-2019-5670 affects NVIDIA GeForce Windows GPU Display Driver. A flaw in the kernel-mode DxgkDdiEscape handler uses an incorrect length when reading/writing a buffer, causing out-of-bounds access and potential local escalation of privileges, code execution, denial of service, or information dis...

CVE-2014-8298

The CVE-2014-8298 issue affects NVIDIA Linux Discrete GPU drivers before R304.125, R331.x before R331.113, R340.x before R340.65, R343.x before R343.36, R346.x before R346.22, Linux for Tegra (L4T) driver before R21.2, and Chrome OS driver before R40. The flaw enables a remote attacker to cause a...

CVE-2017-0317

CVE-2017-0317 concerns the NVIDIA GPU and GeForce Experience installer on Windows. The vulnerability arises from improper permissions on the package extraction path, which could allow a non-privileged user to tamper with extracted files and potentially escalate to code execution. The connected Ne...

CVE-2017-0310

CVE-2017-0310 involves the NVIDIA GPU Display Driver’s kernel-mode layer handler, where improper access controls allow an unprivileged user to trigger a denial of service. The Initial Description notes vulnerability across all driver versions. Connected documents corroborate a local-impact kernel...

CVE-2017-0351

CVE-2017-0351 affects the NVIDIA GPU Display Driver. The kernel mode layer handler contains a NULL pointer dereference caused by invalid user input, leading to denial of service and potential privilege escalation. Documents consistently describe this vulnerability across multiple advisories and p...

CVE-2017-0345

The CVE-2017-0345 case maps to the NVIDIA Windows GPU Display Driver (nvlddmkm.sys) kernel mode handler DxgDdiEscape, where user-provided input used as an array size is not properly validated, enabling out-of-bounds kernel memory access and potentially causing denial of service or privilege escal...

CVE-2018-6249

CVE-2018-6249 refers to a vulnerability in the NVIDIA GPU Display Driver where the kernel-mode layer handler dereferences a NULL pointer, potentially enabling denial of service or privilege escalation. The issue is described across multiple sources as affecting NVIDIA’s GPU display driver softwar...

CVE-2019-5666

CVE-2019-5666 affects the NVIDIA GPU Display Driver (kernel mode nvlddmkm.sys) for Windows and Linux. The issue arises in the DxgkDdiCreateContext path, where untrusted input is used to calculate or reference an array index without proper validation, enabling potential denial of service or privil...