CVE-2016-8805

published 2016-11-08

CVE-2016-8805: For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the…

high 7.8 CVSS 3.0

AV L AC L PR L UI N S U C H I H A H

EXPLOIT

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x7000014 where a value passed from an user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
nvidia	gpu_driver	>= 340 < 342.00	342.00
nvidia	gpu_driver	>= 375 < 375.63	375.63

CWE-264