CVE-2016-8818
HighSummary
All versions of the NVIDIA Windows GPU Display driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape, where a pointer passed from a user to the driver is used without validation. This can lead to denial of service or potential escalation of privileges.
Risk Assessment
This vulnerability could allow attackers to remotely trigger denial of service or gain elevated privileges on the system, posing a significant security threat to the organization.
Recommendation
It is recommended to update NVIDIA drivers to the latest version to mitigate this vulnerability and implement system monitoring to detect unauthorized activities.
Other vulnerabilities in NVIDIA Windows GPU Display driver (nvlddmkm.sys)
See all- CVE-2017-0343High
All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) where a user can trigger a race condition due to lack of synchronization in two functions.
- CVE-2016-8811High
The NVIDIA GPU driver for Quadro, NVS, and GeForce products contains a vulnerability in the kernel mode layer (nvlddmkm.sys) that does not validate the size of an input buffer for DxgDdiEscape ID 0x7000170. This can lead to denial of service or potential escalation of privileges.
- CVE-2016-8809High
The NVIDIA GPU driver for Quadro, NVS, and GeForce products contains a vulnerability in the kernel mode layer that does not validate the size of an input buffer. This may lead to denial of service or potential escalation of privileges.
- CVE-2016-8807High
The NVIDIA GPU driver for Quadro, NVS, and GeForce products before R342.00 and R375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) that can lead to a stack buffer overflow. A value passed from a user to the driver is used without validation as the size input to memcpy().
- CVE-2016-7391High
The NVIDIA GPU driver for Quadro, NVS, and GeForce products contains a vulnerability in the kernel mode layer that allows writing to kernel memory due to a missing array bounds check. This can lead to denial of service or potential privilege escalation.
- CVE-2016-7388High
The NVIDIA GPU driver for Quadro, NVS, and GeForce products contains a vulnerability in the kernel mode layer (nvlddmkm.sys) that may lead to denial of service or potential privilege escalation due to a NULL pointer dereference caused by invalid user input.
- CVE-2016-7387High
The NVIDIA GPU driver for Quadro, NVS, and GeForce products contains a vulnerability in the kernel mode layer that allows an unvalidated value to be used as an index to an internal array. This can lead to denial of service or potential privilege escalation.
- CVE-2016-7385High
The NVIDIA GPU driver for Quadro, NVS, and GeForce products before version 342.00 and R375 before version 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys). A value passed from a user to the driver is used without validation as the index to an internal array, potentially leading to denial of service or privilege escalation.
- CVE-2016-7384High
The NVIDIA GPU driver for Quadro, NVS, and GeForce products contains a vulnerability in the kernel mode layer (nvlddmkm.sys) that may lead to denial of service or potential escalation of privileges due to unchecked input/output lengths in UVMLiteController Device IO Control handling.
Original NVD description (English source)
All versions of NVIDIA Windows GPU Display contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where a pointer passed from a user to the driver is used without validation, leading to denial of service or potential escalation of privileges.