CVE-2020-5965

CWE-125 — Out-of-bounds Read4 documents4 sources
Severity
5.5MEDIUM
EPSS
0.1%
top 84.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Nvidia Geforce FirmwareNvidia NVS FirmwareNvidia Quadro Firmware+2 more
Timeline
PublishedJun 25
Latest updateMay 24

Description

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver (nvwgf2um/x.dll), in which a specially crafted shader can cause an out of bounds access, leading to denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages5 packages

▶NVDnvidia/nvs_firmware390 — 392.61+3
▶NVDnvidia/tesla_firmware418 — 426.78+2
▶NVDnvidia/quadro_firmware390 — 392.61+3
▶NVDnvidia/geforce_firmware450 — 451.48

🔴Vulnerability Details

2
GHSA
GHSA-cwqh-5rv3-xvcg: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver (nvwgf2um/x↗2022-05-24
▶
CVEList
CVE-2020-5965: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver (nvwgf2um/x↗2020-06-25
▶

🕵️Threat Intelligence

1
Talos
Vulnerability Spotlight: Denial-of-service vulnerability in NVIDIA driver↗2020-06-24
▶
CVE-2020-5965 (MEDIUM CVSS 5.5) | NVIDIA Windows GPU Display Driver | cvebase.io