PT-2020-18855 · Nvidia · Nvidia Windows Gpu Display Driver

Published 2020-06-25 · Updated 2021-07-21 · CVE-2020-5964

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions

Description The issue is related to a vulnerability in the service host component of the NVIDIA Windows GPU Display Driver, where the application resources integrity check may be missed. This could lead to code execution, denial of service, or information disclosure.

Recommendations For all versions, update to a version that includes the fix for this issue, as the current version may allow for code execution, denial of service, or information disclosure due to a missed application resources integrity check in the service host component.

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2020-5964

Affected Products

Nvidia Windows Gpu Display Driver

References · 5

• https://nvidia.custhelp.com/app/answers/detail/a_id/5038 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5964 · Security Note
• https://osv.dev/vulnerability/CVE-2020-5964 · Vendor Advisory
• https://nvidia.custhelp.com/app/answers/detail/a_id/5031 · Vendor Advisory
• https://t.me/cvenotify/4638 · Telegram Post