CVE-2015-3625: The NVIDIA GPU driver for FreeBSD R352 before 352.09, 346 before 346.72, R349 before 349.16, R343 before 343.36, R340 before 340.76, R337 before 337.25, R334…

PriorityP428high7.2CVSS 2.0

AVLACLAuNCCICAC

EPSS

0.39%

31.9th percentile

The NVIDIA GPU driver for FreeBSD R352 before 352.09, 346 before 346.72, R349 before 349.16, R343 before 343.36, R340 before 340.76, R337 before 337.25, R334 before 334.21, R331 before 331.113, and R304 before 304.125 allows local users with certain permissions to read or write arbitrary kernel memory via unspecified vectors that trigger an untrusted pointer dereference.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
debian	nvidia-graphics-drivers	—	—
nvidia	gpu_driver	>= 304 < 304.125	304.125
nvidia	gpu_driver	>= 331 < 331.113	331.113
nvidia	gpu_driver	>= 334 < 334.21	334.21
nvidia	gpu_driver	>= 337 < 337.25	337.25
nvidia	gpu_driver	>= 340 < 340.76	340.76
nvidia	gpu_driver	>= 343 < 343.36	343.36
nvidia	gpu_driver	>= 346 < 346.72	346.72
nvidia	gpu_driver	>= 349 < 349.16	349.16
nvidia	gpu_driver	>= 352 < 352.09	352.09

CVSS provenance

nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

vendor_debian7.2LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.