CVE-2016-7384

HIGH 7.8EPSS 1.5%

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) where unchecked input/output lengths in UVMLiteController Device IO Control handling may lead to denial of service or potential escalation of privileges.

Affected: Quadro, NVS, and GeForce (all versions)
CVSS v3.0 NVD: 7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 NVD: 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS: 1.47% chance of exploitation in the next 30 days, 73rd percentile
Published: 2016-11-08
Updated: 2024-08-06

ExploitDB entries (1)

https://www.exploit-db.com/exploits/40655

Security advisories

http://nvidia.custhelp.com/app/answers/detail/a_id/4247
http://www.securityfocus.com/bid/93983
https://support.lenovo.com/us/en/solutions/LEN-10822

References

CVE Record
NVD entry