NVIDIA Windows GPU Display Driver Vulnerability in Quadro, NVS, and GeForce Products
CVE-2016-8810

7.8HIGH

Key Information:

Vendor
Nvidia
Status
Quadro, Nvs, And Geforce (all Versions)
Vendor
CVE Published:
8 November 2016

Summary

A vulnerability in the NVIDIA Windows GPU Display Driver affects Quadro, NVS, and GeForce products by improperly validating user input passed to the driver. This issue arises in the kernel mode layer (nvlddmkm.sys) when handling the DxgDdiEscape ID 0x100009a. An attacker could exploit this flaw to manipulate the internal array index, potentially resulting in a denial of service or escalation of privileges.

Affected Version(s)

Quadro, NVS, and GeForce (all ) Quadro, NVS, and GeForce (all versions)

References

https://support.lenovo.com/us/en/solutions/LEN-10822
x_refsource_CONFIRM
http://www.securityfocus.com/bid/93997
vdb-entryx_refsource_BID
http://nvidia.custhelp.com/app/answers/detail/a_id/4247
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.