PT-2016-5205 · Nvidia · Nvidia Gpu Graphics Driver

Publicado 2016-04-12 · Atualizado 2021-09-09 · CVE-2016-2558

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA GPU graphics driver R340 versions prior to 341.95 NVIDIA GPU graphics driver R352 versions prior to 354.74

Description The issue allows local users to obtain sensitive information, cause a denial of service, or gain privileges via unspecified vectors related to an untrusted pointer. This is due to uninitialized or out-of-bounds memory access in the Escape interface in the Kernel Mode Driver layer.

Recommendations For NVIDIA GPU graphics driver R340 versions prior to 341.95, update to version 341.95 or later. For NVIDIA GPU graphics driver R352 versions prior to 354.74, update to version 354.74 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2016-2558

Produtos afetados

Nvidia Gpu Graphics Driver

Referências · 4

• http://nvidia.custhelp.com/app/answers/detail/a_id/4061 · Aviso do Fabricante
• https://support.lenovo.com/us/en/product_security/len_5551 · Nota
• https://osv.dev/vulnerability/CVE-2016-2558 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-2558 · Nota de Segurança