Nvidia Gpu Display Driver vulnerabilities

CVE-2020-5980 [HIGH] CVE-2020-5980: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in multiple components in NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in multiple components in which a securely loaded system DLL will load its dependencies in an insecure fashion, which may lead to code execution or denial of service.

CVE-2020-5982 [MEDIUM] CWE-770 CVE-2020-5982: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer ( NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) scheduler, in which the software does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests, which may lead to denial of service.

CVE-2020-5964 [HIGH] CWE-345 CVE-2020-5964: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host compon NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure.

CVE-2020-5963 [HIGH] CVE-2020-5963: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Commu NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure.

CVE-2020-5966 [HIGH] CWE-476 CVE-2020-5966: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer ( NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, in which a NULL pointer is dereferenced, leading to denial of service or potential escalation of privileges.

CVE-2020-5965 [MEDIUM] CWE-125 CVE-2020-5965: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mod NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver (nvwgf2um/x.dll), in which a specially crafted shader can cause an out of bounds access, leading to denial of service.

CVE-2020-5967 [MEDIUM] CWE-362 CVE-2020-5967: NVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in which NVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in which a race condition may lead to a denial of service.

CVE-2020-5962 [HIGH] CVE-2020-5962: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Pane NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component, in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges.

CVE-2020-5960 [MEDIUM] CWE-476 CVE-2020-5960: NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module (nvidia.ko), where a null p NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module (nvidia.ko), where a null pointer dereference may occur, which may lead to denial of service.

CVE-2020-5959 [MEDIUM] CWE-129 CVE-2020-5959: NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin in which an in NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin in which an input index value is incorrectly validated which may lead to denial of service.

CVE-2020-5961 [MEDIUM] CWE-459 CVE-2020-5961: NVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource cle NVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource clean up on a failure path can impact the guest VM, leading to denial of service.

CVE-2020-5958 [HIGH] CVE-2020-5958: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Pane NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can plant a malicious DLL file, which may lead to code execution, denial of service, or information disclosure.

CVE-2020-5957 [HIGH] CVE-2020-5957: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Pane NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges.

CVE-2019-5690 [HIGH] CWE-787 CVE-2019-5690: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer ( NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the size of an input buffer is not validated, which may lead to denial of service or escalation of privileges.

CVE-2019-5691 [HIGH] CWE-476 CVE-2019-5691: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer ( NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which a NULL pointer is dereferenced, which may lead to denial of service or escalation of privileges.

CVE-2019-5692 [HIGH] CWE-129 CVE-2019-5692: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer ( NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the product uses untrusted input when calculating or using an array index, which may lead to escalation of privileges or denial of service.

CVE-2019-5694 [MEDIUM] CWE-427 CVE-2019-5694: NVIDIA Windows GPU Display Driver, R390 driver version, contains a vulnerability in NVIDIA Control P NVIDIA Windows GPU Display Driver, R390 driver version, contains a vulnerability in NVIDIA Control Panel in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), which may lead to denial of service or information disclosure through code execution. The attacke

CVE-2019-5693 [MEDIUM] CWE-824 CVE-2019-5693: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer ( NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) in which the program accesses or uses a pointer that has not been initialized, which may lead to denial of service.

CVE-2019-5675 [HIGH] CWE-662 CVE-2019-5675: NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in th NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the product does not properly synchronize shared data, such as static variables across threads, which can lead to undefined behavior and unpredictable data changes, which may lead to denia

CVE-2019-5676 [MEDIUM] CWE-427 CVE-2019-5676: NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in wh NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), leading to escalation of privileges through code execution.