PT-2019-17816 · Nvidia · Nvidia Windows Gpu Display Driver

Published 2019-11-09 · Updated 2020-08-24 · CVE-2019-5690

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions

Description The issue concerns a vulnerability in the kernel mode layer handler for DxgkDdiEscape, specifically within the nvlddmkm.sys module. The problem arises because the size of an input buffer is not properly validated. This lack of validation may lead to a denial of service or potentially allow for escalation of privileges.

Recommendations For all versions, apply the necessary patch or update from NVIDIA to fix the vulnerability in the nvlddmkm.sys handler for DxgkDdiEscape.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-5690

Affected Products

Nvidia Windows Gpu Display Driver

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2019-5690 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/4907 · Vendor Advisory