PT-2016-5203 · Nvidia · Nvidia Gpu Graphics Driver

Published 2016-04-12 · Updated 2021-09-09 · CVE-2016-2556

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA GPU graphics driver R340 versions prior to 341.95 NVIDIA GPU graphics driver R352 versions prior to 354.74

Description The issue is related to the Escape interface in the Kernel Mode Driver layer of the NVIDIA GPU graphics driver, which improperly allows access to restricted functionality. This allows local users to gain privileges via unspecified vectors.

Recommendations For NVIDIA GPU graphics driver R340 versions prior to 341.95, update to version 341.95 or later. For NVIDIA GPU graphics driver R352 versions prior to 354.74, update to version 354.74 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-2556

Affected Products

Nvidia Gpu Graphics Driver

References · 4

• http://nvidia.custhelp.com/app/answers/detail/a_id/4059 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-2556 · Security Note
• https://osv.dev/vulnerability/CVE-2016-2556 · Vendor Advisory
• https://support.lenovo.com/us/en/product_security/len_5551 · Note