PT-2016-5204 · Nvidia · Nvidia Gpu Graphics Driver

Published 2016-04-12 · Updated 2021-09-09 · CVE-2016-2557

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA GPU graphics driver R340 versions prior to 341.95 NVIDIA GPU graphics driver R352 versions prior to 354.74

Description The issue allows local users to obtain sensitive information from kernel memory, cause a denial of service, or possibly gain privileges via unspecified vectors. This is triggered by uninitialized or out-of-bounds memory access in the Escape interface in the Kernel Mode Driver layer.

Recommendations For NVIDIA GPU graphics driver R340 versions prior to 341.95, update to version 341.95 or later. For NVIDIA GPU graphics driver R352 versions prior to 354.74, update to version 354.74 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-2557

Affected Products

Nvidia Gpu Graphics Driver

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-2557 · Security Note
• http://nvidia.custhelp.com/app/answers/detail/a_id/4060 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-2557 · Vendor Advisory
• https://support.lenovo.com/us/en/product_security/len_5551 · Note