CVE-2016-8809

HIGH 7.8EPSS 1.6%

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x70001b2 where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges.

Affected: Quadro, NVS, and GeForce (all versions)
CVSS v3.0 NVD: 7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 NVD: 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS: 1.60% chance of exploitation in the next 30 days, 76th percentile
Published: 2016-11-08
Updated: 2024-08-06

ExploitDB entries (1)

https://www.exploit-db.com/exploits/40664

Security advisories

http://nvidia.custhelp.com/app/answers/detail/a_id/4247
http://www.securityfocus.com/bid/93992
https://support.lenovo.com/us/en/solutions/LEN-10822

References

CVE Record
NVD entry