QwikSec

Security Database

CVE

CWE

Training

CVE-2016-8817

Published: Dec 16, 2016

Modified: Aug 6, 2024

PUBLISHED

Description

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where a value passed from a user to the driver is used without validation as the size input to memcpy(), causing a buffer overflow, leading to denial of service or potential escalation of privileges.

Vendor	Product	Versions
Nvidia Corporation	Quadro, NVS, GeForce, GRID and Tesla	affected `All`

References

http://nvidia.custhelp.com/app/answers/detail/a_id/4257

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.