CVE-2017-0321

CVE-2017-0321 affects NVIDIA GPU Display Driver kernels in both Linux and Windows, caused by a NULL pointer dereference in the kernel mode layer handler when given invalid user input. The vulnerability may allow a local attacker to cause a denial of service and potentially escalate privileges. Pu...

CVE-2017-0341

CVE-2017-0341 affects the NVIDIA Windows GPU Display Driver (kernel mode layer nvlddmkm.sys) in DxgDdiEscape, where user input can trigger an access to an uninitialized pointer, potentially causing denial of service or privilege escalation. The connected material also documents related CVEs (0342...

CVE-2017-6266

CVE-2017-6266 affects the NVIDIA GPU Display Driver’s kernel mode layer handler, where improper access controls could allow unprivileged users to cause a denial of service. Connected advisories note related CVEs (6267, 6272) and indicate upstream fixes; for example, Arch Linux ASA-201709-22 fixes...

CVE-2017-0350

CVE-2017-0350 affects NVIDIA GPU Display Driver. A vulnerability in the kernel mode layer handler arises from improper validation of user-supplied values used in offset calculations, potentially enabling denial of service or privilege escalation. In affected Linux drivers, versions 375.x prior to...

CVE-2017-6251

CVE-2017-6251 affects the NVIDIA Windows GPU Display Driver, specifically the kernel mode layer handler (nvlddmkm.sys). The root cause is a missing permissions check, allowing a user to access arbitrary physical system memory and potentially escalate privileges. Public connected documentation con...

CVE-2017-0318

CVE-2017-0318 affects all versions of the NVIDIA Linux GPU Display Driver. The vulnerability is in the kernel mode layer handler, where improper validation of an input parameter may cause a denial of service on the system. No specific patch/version/fix is provided in the connected documents; deta...

CVE-2017-0352

NVIDIA GPU Display Driver vulnerability (CVE-2017-0352) affects all versions of the NVIDIA GPU Display Driver. The issue is in the GPU firmware with incorrect access control that may permit CPU access to sensitive GPU control registers, enabling local privilege escalation. Multiple connected sour...

CVE-2017-0323

CVE-2017-0323 affects NVIDIA Windows GPU Display Driver. The provided documents describe a vulnerability in the kernel-mode layer handler (nvlddmkm.sys) where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential privilege escalation. The incident is d...

CVE-2017-6257

CVE-2017-6257 affects the NVIDIA GPU Display Driver (kernel-mode layer handler). The vulnerability is a NULL pointer dereference that can cause a denial of service or potentially escalate privileges. It is described as a local‑impact issue with low attack complexity (local access, no user interac...

CVE-2017-0309

NVIDIA GPU Display Driver is affected (Linux and Windows) by CVE-2017-0309 and related CVEs due to integer overflows in the kernel mode layer handler, causing denial of service and potential privilege escalation. Linux driver lines: 304.x<304.135, 340.x<340.102, 361.x<361.119, 375.x<3...

CVE-2017-0311

CVE-2017-0311 : NVIDIA GPU Display Driver R378 contains a vulnerability in the kernel mode layer handler where improper access control may lead to denial of service or possible escalation of privileges. A local attacker could exploit this with low attack complexity (LOCAL vector, no authenticatio...

CVE-2017-0317

CVE-2017-0317 concerns the NVIDIA GPU and GeForce Experience installer on Windows. The vulnerability arises from improper permissions on the package extraction path, which could allow a non-privileged user to tamper with extracted files and potentially escalate to code execution. The connected Ne...

CVE-2017-0312

The CVE-2017-0312 issue affects the NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in the DxgkDdiEscape handler for ID 0x100008b. A user-supplied value is used as the loop limit, enabling denial of service or potential privilege escalation. Affected driver branches include 375.x (prior to 376.6...

CVE-2017-0313

CVE-2017-0313 affects the NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in the SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual). The issue is an out-of-bounds/read/write condition caused by untrusted input referencing memory outside the buffer, leading to denial of service or local privi...

CVE-2017-0345

The CVE-2017-0345 case maps to the NVIDIA Windows GPU Display Driver (nvlddmkm.sys) kernel mode handler DxgDdiEscape, where user-provided input used as an array size is not properly validated, enabling out-of-bounds kernel memory access and potentially causing denial of service or privilege escal...

CVE-2017-0315

CVE-2017-0315 affects the NVIDIA Windows GPU Display Driver. The issue resides in the kernel-mode layer handler nvlddmkm.sys, specifically the DxgkDdiEscape path, where an attempt to access an invalid object pointer can cause denial of service or potentially escalate privileges. It is described a...

CVE-2017-0353

CVE-2017-0353 affects the NVIDIA Windows GPU Display Driver, specifically the kernel-mode handler DxgDdiEscape in the nvlddmkm.sys component. The root cause is improper locking under certain conditions, which can lead to a denial of service and, potentially, privilege escalation in local contexts...

CVE-2017-6267

NVIDIA GPU Display Driver kernels-mode layer handler contains a vulnerability (CVE-2017-6267) where improper initialization of internal objects can cause an infinite loop, leading to denial of service. The issue affects NVIDIA graphics drivers; Arch Linux ASAs and related advisories note the fixe...

CVE-2017-0310

CVE-2017-0310 involves the NVIDIA GPU Display Driver’s kernel-mode layer handler, where improper access controls allow an unprivileged user to trigger a denial of service. The Initial Description notes vulnerability across all driver versions. Connected documents corroborate a local-impact kernel...

CVE-2017-0348

CVE-2017-0348 affects the NVIDIA Windows GPU Display Driver. The vulnerability is a NULL pointer dereference in the kernel-mode handler nvlddmkm.sys, which may cause denial of service or potentially escalate privileges. Affected product: NVIDIA Windows GPU Display Driver (kernel-mode layer). Root...

CVE-2017-6272

CVE-2017-6272 affects the NVIDIA GPU Display Driver, specifically the kernel mode layer handler. The vulnerability arises when a value provided by a user is not properly validated before being used as an index into an internal array, potentially enabling denial of service or privilege escalation....

CVE-2017-0319

Talos’ vulnerability report confirms CVE-2017-0319 is a heap overflow in Poppler-0.53.0 affecting the image rendering path DCTStream::readProgressiveSOF(). A crafted PDF can trigger heap corruption via an oversized color components count during image rendering, enabling potential code execution o...

CVE-2017-0351

CVE-2017-0351 affects the NVIDIA GPU Display Driver. The kernel mode layer handler contains a NULL pointer dereference caused by invalid user input, leading to denial of service and potential privilege escalation. Documents consistently describe this vulnerability across multiple advisories and p...

CVE-2017-0349

NVIDIA Windows GPU Display Driver (nvlddmkm.sys) contains a vulnerability in the kernel mode layer handler DxgkDdiEscape where a user-supplied pointer is not validated before dereference, potentially causing denial of service or elevation of privileges. Affected: NVIDIA Windows GPU Display Driver...

CVE-2017-6254

The CVE-2017-6254 entry relates to the NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in the DxgkDdiEscape handler. The vulnerability stems from using a user-provided pointer without validation, potentially enabling denial of service or privilege escalation. Connected documents corroborate simi...

CVE-2017-6268

NVIDIA Windows GPU Display Driver (nvlddmkm.sys) contains a vulnerability in the DxgkDdiEscape handler where a user-supplied value is not validated before being used as an array index, potentially causing denial of service or privilege escalation. Root cause: improper validation of user input pas...

CVE-2017-0324

The CVE-2017-0324 case concerns the NVIDIA Windows GPU Display Driver, where the kernel-mode driver component nvlddmkm.sys mishandles input buffer sizing in the DxgkDdiEscape path. The vulnerability can lead to denial of service or, in some cases, elevation of privileges. Public details across co...

CVE-2017-6253

CVE-2017-6253 : NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler (nvlddmkm.sys) for DxgkDdiEscape where the size of the input buffer is not validated, which may lead to denial of service or potential elevation of privileges. The description provided does...

CVE-2017-0342

CVE-2017-0342 affects the NVIDIA Windows GPU Display Driver, specifically the kernel mode layer handler in nvlddmkm.sys. The vulnerability arises from incorrect calculations leading to an invalid address access in the DxgDdiEscape/related paths, enabling a local attacker to cause a denial of serv...

CVE-2017-6256

NVIDIA Windows GPU Display Driver (nvlddmkm.sys) contains a vulnerability in the DxgkDdiEscape handler where a user-supplied value is used as an index into an array without proper validation, potentially leading to denial of service or privilege escalation. Documented as CVE-2017-6256, this affec...

CVE-2017-6259

The CVE-2017-6259 entry affects the NVIDIA GPU Display Driver, involving a vulnerability in the kernel mode layer handler where incorrect detection/recovery from an invalid state can lead to denial of service. Affected component is the NVIDIA GPU Display Driver (kernel mode layer handler). Impact...

CVE-2017-0308

NVIDIA Windows GPU Display Driver (nvlddmkm.sys)DxgkDdiEscape handling in the kernel-mode layer is vulnerable. The issue (CVE-2017-0308) arises from untrusted input used to calculate the input buffer size, which can lead to denial of service or elevation of privileges. The connected Nessus entry ...

CVE-2017-0355

Summary: CVE-2017-0355 affects NVIDIA Windows GPU Display Driver. The vulnerability exists in the kernel mode layer handler for DxgkDdiEscape, where the driver may access paged memory while holding a spinlock, enabling a potential denial-of-service condition. This is part of a family of related f...

CVE-2017-6260

Summary: CVE-2017-6260 affects the NVIDIA Windows GPU Display Driver, involving a vulnerability in the kernel mode layer helper function where an incorrect calculation of string length may lead to denial of service. The connected documents corroborate a kernel-mode issue in nvlddmkm-related paths...

CVE-2017-0354

The NVIDIA Windows GPU Display Driver (nvlddmkm.sys) kernel-mode handler for DxgkDdiEscape is vulnerable to an issue where a function requiring a lower IRQL can be invoked while IRQL is raised, enabling denial of service and potential privilege escalation. Public details from connected sources in...

CVE-2017-0314

CVE-2017-0314 affects the NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in the kernel-mode layer for the SubmitCommandVirtual DDI. Untrusted input can reference memory outside the intended buffer boundary, leading to denial of service or elevation of privileges . The description indicates the ...

CVE-2017-0346

CVE-2017-0346 affects the NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in the kernel mode layer handler for DxgkDdiEscape. The vulnerability stems from improper validation of the size of the input buffer, allowing a local attacker to trigger denial of service or potential elevation of privile...

CVE-2017-6252

CVE-2017-6252 affects the NVIDIA Windows GPU Display Driver. The vulnerability exists in the kernel mode layer handler (likely nvlddmkm.sys) where a NULL pointer dereference can cause a denial of service or potential privilege escalation. Affected product area is the NVIDIA Windows GPU Display Dr...

CVE-2017-6270

The CVE-2017-6270 issue affects the NVIDIA Windows GPU Display Driver, specifically the kernel mode layer handler DxgkDdiCreateAllocation. Untrusted user input is used as a divisor without validation during a calculation, which may lead to division-by-zero and denial of service. Impact is limited...

CVE-2017-0320

Summary: NVIDIA Windows GPU Display Driver vulnerable in the kernel mode layer handler (nvlddmkm.sys) where improper handling of values can cause denial of service. This CVE-2017-0320 is cited among a set of kernel-mode vulnerabilities affecting NVIDIA 375.x/378.x driver branches and related comp...

CVE-2017-0322

NVIDIA Windows GPU Display Driver (nvlddmkm.sys) contains a kernel-mode vulnerability (CVE-2017-0322) where a value from user space is not validated before being used as an array index. This results in denial of service or potential privilege escalation. It is a local issue with low attack comple...

CVE-2017-0343

CVE-2017-0343 affects the NVIDIA Windows GPU Display Driver (kernel mode layer nvlddmkm.sys). The connected sources confirm a race condition due to lack of synchronization in the nvlddmkm.sys handler, which can lead to denial of service or potential privilege escalation. Affected component is the...

CVE-2017-0347

The CVE-2017-0347 issue affects the NVIDIA Windows GPU Display Driver, specifically the nvlddmkm.sys kernel-mode handler for DxgkDdiEscape. The root cause is improper validation of user-supplied input, which is used as an index into an array, enabling denial of service or potential privilege esca...

CVE-2017-6269

CVE-2017-6269 affects the NVIDIA Windows GPU Display Driver, specifically the kernel mode layer handler nvlddmkm.sys for DxgkDdiEscape. The issue arises when a pointer passed from user mode is used without validation, which may enable denial of service or elevation of privileges. Public sources c...

CVE-2017-0344

CVE-2017-0344 affects the NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in the kernel mode layer via the DxgDdiEscape handler. The connected documents indicate an unspecified flaw in DxgDdiEscape that can allow a local attacker to access arbitrary physical memory and escalate privileges, consi...

CVE-2017-6271

CVE-2017-6271 affects the NVIDIA Windows GPU Display Driver, specifically the kernel mode layer handler DxgkDdiCreateAllocation in nvlddmkm.sys. The vulnerability arises when untrusted user input is used as a factor/ divisor without validation during processing of block linear information, which ...

CVE-2017-6255

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where improper input parameter handling may lead to denial of service or privilege escalation. The issue affects the kernel mode layer of the NVIDIA GPU Display Driver and ...

CVE-2017-6277

CVE-2017-6277 affects the NVIDIA Windows GPU Display Driver, specifically the kernel-mode handler nvlddmkm.sys for DxgkDdiEscape. The issue arises from a user-supplied value not being validated before it is used as an index into an array, potentially causing denial of service or a possible escala...