CVE-2016-8822

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x600000E, 0x600000F, and 0x6000010 where a value passed from a user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges.
References
Link Resource
http://nvidia.custhelp.com/app/answers/detail/a_id/4278 Patch Vendor Advisory
http://www.securityfocus.com/bid/95014 Third Party Advisory VDB Entry
http://nvidia.custhelp.com/app/answers/detail/a_id/4278 Patch Vendor Advisory
http://www.securityfocus.com/bid/95014 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:nvidia:gpu_driver:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:00

Type Values Removed Values Added
References () http://nvidia.custhelp.com/app/answers/detail/a_id/4278 - Patch, Vendor Advisory () http://nvidia.custhelp.com/app/answers/detail/a_id/4278 - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/95014 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/95014 - Third Party Advisory, VDB Entry

Information

Published : 2016-12-16 21:59

Updated : 2024-11-21 03:00


NVD link : CVE-2016-8822

Mitre link : CVE-2016-8822

CVE.ORG link : CVE-2016-8822


JSON object : View

Products Affected

nvidia

  • gpu_driver

microsoft

  • windows
CWE
CWE-20

Improper Input Validation