CVE-2019-5692

CVE-2019-5692 affects NVIDIA Windows GPU Display Driver (kernel mode nvlddmkm.sys) in the DxgkDdiEscape handler, where untrusted input is used to compute an array index, potentially enabling local privilege escalation or denial of service. Connected sources confirm an NVIDIA Windows driver vulner...

CVE-2019-5690

CVE-2019-5690 affects NVIDIA Windows GPU Display Driver via the nvlddmkm.sys DxgkDdiEscape handler, where input buffer size is not validated, potentially enabling denial of service or privilege escalation. Public details confirm affected products as NVIDIA Windows GPU Display Driver (Windows) and...

CVE-2019-5691

CVE-2019-5691 : NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel-mode nvlddmkm.sys DxgkDdiEscape handler where a NULL pointer is dereferenced, potentially enabling denial of service or privilege escalation. Affected product: NVIDIA Windows GPU Display Driver (Windows). Und...

CVE-2021-1056

CVE-2021-1056 affects NVIDIA GPU Display Driver for Linux (kernel mode layer nvidia.ko). A local attacker could exploit improper handling of OS filesystem permissions to break GPU device isolation, potentially causing denial of service or information disclosure. Public details in connected docume...

CVE-2021-1052

NVIDIA GPU Display Driver (Windows and Linux) contains CVE-2021-1052 in the kernel-mode layer (nvlddmkm.sys / nvidia.ko) via DxgkDdiEscape/IOCTL, allowing user-mode clients to access legacy privileged APIs, risking DoS, privilege escalation, and information disclosure. Related CVEs 1053 (state: i...

CVE-2019-5675

CVE-2019-5675 affects NVIDIA Windows GPU Display Driver for Windows (nvlddmkm.sys) with the DxgkDdiEscape handler. The root cause is improper synchronization of shared data across threads, causing undefined behavior that can lead to denial of service, escalation of privileges, or information disc...

CVE-2019-5683

CVE-2019-5683 affects NVIDIA Windows GPU Display Driver (all versions) via the user-mode video driver trace logger. The issue arises when a local attacker with system access creates a hard link and the driver fails to detect hard-link attacks, potentially enabling code execution, denial of servic...

CVE-2017-0341

CVE-2017-0341 affects the NVIDIA Windows GPU Display Driver (kernel mode layer nvlddmkm.sys) in DxgDdiEscape, where user input can trigger an access to an uninitialized pointer, potentially causing denial of service or privilege escalation. The connected material also documents related CVEs (0342...

CVE-2019-5687

CVE-2019-5687 affects the NVIDIA Windows GPU Display Driver (kernel mode nvlddmkm.sys) with a flaw in the DxgkDdiEscape handler caused by an incorrect use of default permissions, exposing an object to an unintended actor. The vulnerability is documented across multiple sources (NVD entry, Red Hat...

CVE-2013-5987

CVE-2013-5987 relates to a local privilege-escalation bug in NVIDIA Graphics Drivers where unprivileged user-mode software could access the GPU and gain elevated privileges due to a failure to restrict access to the GPU. The IBM bulletin lists affected NVIDIA products and confirms a repair path v...

CVE-2017-0350

CVE-2017-0350 affects NVIDIA GPU Display Driver. A vulnerability in the kernel mode layer handler arises from improper validation of user-supplied values used in offset calculations, potentially enabling denial of service or privilege escalation. In affected Linux drivers, versions 375.x prior to...

CVE-2016-7382

The CVE-2016-7382 issue affects NVIDIA GPUs (Quadro, NVS, GeForce, Tesla) with the GPU Display Driver. It is a kernel-mode vulnerability in the driver’s nvlddmkm.sys (Windows) / nvidia.ko (Linux) handler where a missing permissions check can allow an attacker to access arbitrary physical memory, ...

CVE-2017-6251

CVE-2017-6251 affects the NVIDIA Windows GPU Display Driver, specifically the kernel mode layer handler (nvlddmkm.sys). The root cause is a missing permissions check, allowing a user to access arbitrary physical system memory and potentially escalate privileges. Public connected documentation con...

CVE-2015-7866

CVE-2015-7866 describes an unquoted Windows search path vulnerability in the NVIDIA GPU graphics driver control panel component nvSmartMaxApp.exe. A local attacker could exploit this to escalate privileges, demonstrated by using a Trojan horse named C:\Program.exe. The affected products are NVIDI...

CVE-2017-0352

NVIDIA GPU Display Driver vulnerability (CVE-2017-0352) affects all versions of the NVIDIA GPU Display Driver. The issue is in the GPU firmware with incorrect access control that may permit CPU access to sensitive GPU control registers, enabling local privilege escalation. Multiple connected sour...

CVE-2013-0131

CVE-2013-0131 affects the NVIDIA GPU driver for the X Window System on UNIX, where buffer overflow in NoScanout ARGB cursor handling allows remote authenticated users to execute arbitrary code. The vulnerability spans multiple driver branches (pre-304.88, 310.x pre-310.44, 313.x pre-313.30). In p...

CVE-2017-0323

CVE-2017-0323 affects NVIDIA Windows GPU Display Driver. The provided documents describe a vulnerability in the kernel-mode layer handler (nvlddmkm.sys) where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential privilege escalation. The incident is d...

CVE-2014-8298

The CVE-2014-8298 issue affects NVIDIA Linux Discrete GPU drivers before R304.125, R331.x before R331.113, R340.x before R340.65, R343.x before R343.36, R346.x before R346.22, Linux for Tegra (L4T) driver before R21.2, and Chrome OS driver before R40. The flaw enables a remote attacker to cause a...

CVE-2018-6251

CVE-2018-6251 affects the NVIDIA Windows GPU Display Driver, specifically the DirectX 10 Usermode driver. A specially crafted pixel shader can cause writing to unallocated memory, leading to denial of service or potential code execution. This vulnerability is reported across multiple feeds (NVD, ...

CVE-2017-0317

CVE-2017-0317 concerns the NVIDIA GPU and GeForce Experience installer on Windows. The vulnerability arises from improper permissions on the package extraction path, which could allow a non-privileged user to tamper with extracted files and potentially escalate to code execution. The connected Ne...

CVE-2019-5666

CVE-2019-5666 affects the NVIDIA GPU Display Driver (kernel mode nvlddmkm.sys) for Windows and Linux. The issue arises in the DxgkDdiCreateContext path, where untrusted input is used to calculate or reference an array index without proper validation, enabling potential denial of service or privil...

CVE-2017-0312

The CVE-2017-0312 issue affects the NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in the DxgkDdiEscape handler for ID 0x100008b. A user-supplied value is used as the loop limit, enabling denial of service or potential privilege escalation. Affected driver branches include 375.x (prior to 376.6...

CVE-2017-0313

CVE-2017-0313 affects the NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in the SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual). The issue is an out-of-bounds/read/write condition caused by untrusted input referencing memory outside the buffer, leading to denial of service or local privi...

CVE-2019-5670

CVE-2019-5670 affects NVIDIA GeForce Windows GPU Display Driver. A flaw in the kernel-mode DxgkDdiEscape handler uses an incorrect length when reading/writing a buffer, causing out-of-bounds access and potential local escalation of privileges, code execution, denial of service, or information dis...

CVE-2016-8823

CVE-2016-8823 affects the NVIDIA Windows GPU Display Driver (kernel mode nvlddmkm.sys) and arises from the DxgDdiEscape handler, where the input buffer size is not validated. The issue enables local access to cause a denial of service or possible privilege escalation. Public details describe a lo...

CVE-2017-0315

CVE-2017-0315 affects the NVIDIA Windows GPU Display Driver. The issue resides in the kernel-mode layer handler nvlddmkm.sys, specifically the DxgkDdiEscape path, where an attempt to access an invalid object pointer can cause denial of service or potentially escalate privileges. It is described a...

CVE-2017-0345

The CVE-2017-0345 case maps to the NVIDIA Windows GPU Display Driver (nvlddmkm.sys) kernel mode handler DxgDdiEscape, where user-provided input used as an array size is not properly validated, enabling out-of-bounds kernel memory access and potentially causing denial of service or privilege escal...

CVE-2015-7865

CVE-2015-7865 details a local privilege escalation in NVIDIA graphics drivers for Windows prior to: R340<341.92, R352<354.35, and R358

CVE-2016-7389

The CVE-2016-7389 issue affects NVIDIA GPU Display Driver for Linux on NVIDIA Quadro, NVS, GeForce, and Tesla products. It involves the kernel-mode layer (nvidia.ko) mmap() handler with improper input validation, enabling privilege escalation by gaining access to arbitrary physical memory. Affect...

CVE-2017-0348

CVE-2017-0348 affects the NVIDIA Windows GPU Display Driver. The vulnerability is a NULL pointer dereference in the kernel-mode handler nvlddmkm.sys, which may cause denial of service or potentially escalate privileges. Affected product: NVIDIA Windows GPU Display Driver (kernel-mode layer). Root...

CVE-2017-0351

CVE-2017-0351 affects the NVIDIA GPU Display Driver. The kernel mode layer handler contains a NULL pointer dereference caused by invalid user input, leading to denial of service and potential privilege escalation. Documents consistently describe this vulnerability across multiple advisories and p...

CVE-2017-6272

CVE-2017-6272 affects the NVIDIA GPU Display Driver, specifically the kernel mode layer handler. The vulnerability arises when a value provided by a user is not properly validated before being used as an index into an internal array, potentially enabling denial of service or privilege escalation....

CVE-2016-8806

CVE-2016-8806 affects the NVIDIA Windows GPU Display Driver on NVIDIA Quadro/NVS/GeForce. The kernel-mode driver component nvlddmkm.sys handles DxgDdiEscape ID 0x5000027 and uses a user-provided pointer without validation, leading to possible denial of service or privilege escalation. Affected dr...

CVE-2016-8808

CVE-2016-8808 affects NVIDIA Windows GPU Display Driver on Quadro, NVS, and GeForce Windows systems. The vulnerability lies in the kernel-mode driver nvlddmkm.sys in the DxgDdiEscape handler, where an input value from user space is used as an index into an internal array without proper validation...

CVE-2017-0349

NVIDIA Windows GPU Display Driver (nvlddmkm.sys) contains a vulnerability in the kernel mode layer handler DxgkDdiEscape where a user-supplied pointer is not validated before dereference, potentially causing denial of service or elevation of privileges. Affected: NVIDIA Windows GPU Display Driver...

CVE-2017-6254

The CVE-2017-6254 entry relates to the NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in the DxgkDdiEscape handler. The vulnerability stems from using a user-provided pointer without validation, potentially enabling denial of service or privilege escalation. Connected documents corroborate simi...

CVE-2017-6268

NVIDIA Windows GPU Display Driver (nvlddmkm.sys) contains a vulnerability in the DxgkDdiEscape handler where a user-supplied value is not validated before being used as an array index, potentially causing denial of service or privilege escalation. Root cause: improper validation of user input pas...

CVE-2016-7384

The CVE-2016-7384 entry concerns NVIDIA Windows GPU Display Driver kernels nvlddmkm.sys in Quadro/NVS/GeForce on Windows, with affected driver branches R340 before 342.00 and R375 before 375.63. The vulnerability stems from unchecked input/output lengths in the UVMLiteController Device IO Control...

CVE-2017-0324

The CVE-2017-0324 case concerns the NVIDIA Windows GPU Display Driver, where the kernel-mode driver component nvlddmkm.sys mishandles input buffer sizing in the DxgkDdiEscape path. The vulnerability can lead to denial of service or, in some cases, elevation of privileges. Public details across co...

CVE-2017-6253

CVE-2017-6253 : NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler (nvlddmkm.sys) for DxgkDdiEscape where the size of the input buffer is not validated, which may lead to denial of service or potential elevation of privileges. The description provided does...

CVE-2019-5669

CVE-2019-5669 affects NVIDIA NVIDIA Display Driver (Windows/Linux). Root cause: in the kernel mode layer handler DxgkDdiEscape, a read/write uses an incorrect length, causing out-of-bounds memory access. Impact: potential denial of service or privilege escalation as described in vendor advisories...

CVE-2016-8805

CVE-2016-8805 affects NVIDIA Windows GPU Display Driver in the kernel mode layer (nvlddmkm.sys) for Quadro, NVS, and GeForce on Windows. The vulnerability arises from DxgDdiEscape ID 0x7000014 using a value from user input as an index into an internal array without validation, enabling denial of ...

CVE-2016-8807

CVE-2016-8807 affects the NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in the kernel-mode layer. The issue occurs in the DxgDdiEscape handler for ID 0x10000e9, where a user-supplied size is used as the input size to memcpy, causing a stack-based buffer overflow. This can lead to denial of ser...

CVE-2016-8821

The CVE-2016-8821 family affects NVIDIA Windows GPU Display Driver (nvlddmkm.sys) and relates to the kernel-mode DxgDdiEscape handler, where improper access controls may allow a user to access arbitrary physical memory and escalate privileges. Connected sources describe multiple related CVEs (CVE...

CVE-2015-3625

The CVE-2015-3625 entry concerns the NVIDIA GPU driver for FreeBSD where local users with certain permissions can read or write arbitrary kernel memory via unspecified vectors that trigger an untrusted pointer dereference. Affected releases include multiple NVIDIA driver branches: R352 before 352...

CVE-2017-0342

CVE-2017-0342 affects the NVIDIA Windows GPU Display Driver, specifically the kernel mode layer handler in nvlddmkm.sys. The vulnerability arises from incorrect calculations leading to an invalid address access in the DxgDdiEscape/related paths, enabling a local attacker to cause a denial of serv...

CVE-2017-6256

NVIDIA Windows GPU Display Driver (nvlddmkm.sys) contains a vulnerability in the DxgkDdiEscape handler where a user-supplied value is used as an index into an array without proper validation, potentially leading to denial of service or privilege escalation. Documented as CVE-2017-6256, this affec...

CVE-2017-6259

The CVE-2017-6259 entry affects the NVIDIA GPU Display Driver, involving a vulnerability in the kernel mode layer handler where incorrect detection/recovery from an invalid state can lead to denial of service. Affected component is the NVIDIA GPU Display Driver (kernel mode layer handler). Impact...

CVE-2016-7383

CVE-2016-7383 affects NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in Quadro/NVS/GeForce on Windows. The vulnerability is in a memory-mapping API handler in the kernel-mode layer, enabling denial of service or potential privilege escalation. It is associated with driver versions: R340 before ...

CVE-2019-5668

CVE-2019-5668 refers to a vulnerability in the NVIDIA Windows GPU Display Driver’s kernel mode layer (nvlddmkm.sys), specifically the DxgkDdiSubmitCommandVirtual handler where a NULL pointer is dereferenced. The description and connected sources confirm the impact as denial of service or privileg...