Vulnerability in NVIDIA Windows GPU Display Driver Leading to Potential System Compromise
CVE-2016-8815

7.8HIGH

Key Information:

Vendor
Nvidia
Status
Quadro, Nvs, Geforce, Grid And Tesla
Vendor
CVE Published:
16 December 2016

Summary

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys). This issue arises from the handler for DxgDdiEscape, where a user-supplied value is improperly validated before being used as an index to an array. This oversight can lead to serious security implications, including denial of service attacks and the possibility of privilege escalation, compromising system integrity.

Affected Version(s)

Quadro, NVS, GeForce, GRID and Tesla All

References

http://nvidia.custhelp.com/app/answers/detail/a_id/4257
x_refsource_CONFIRM
http://www.securityfocus.com/bid/95053
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.