PT-2020-18871 · Microsoft+1 · Directx 11+1

Published 2020-10-02 · Updated 2020-10-09 · CVE-2020-5981

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions

Description The issue is related to a vulnerability in the DirectX11 user mode driver, specifically in the nvwgf2um/x.dll component, where a specially crafted shader can cause an out of bounds access. This may lead to denial of service or code execution.

Recommendations For all versions, consider disabling the use of specially crafted shaders in the DirectX11 user mode driver until a patch is available. Restrict access to the nvwgf2um/x.dll component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2020-5981

Affected Products

Directx 11

Nvidia Windows Gpu Display Driver

References · 2

• https://nvidia.custhelp.com/app/answers/detail/a_id/5075 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5981 · Security Note