Nvidia Corporation vulnerabilities, page 5

139 vulnerabilities

Known vulnerabilities in Nvidia Corporation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 16 products.

9.3CriticalCVE-2017-0338ubuntu · android +2 moreubuntu androidAn elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33057977. References: N-CVE-2017-0338.EPSS1.72%5.5MediumCVE-2017-0336ubuntu · android +2 moreubuntu androidAn information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.18. Android ID: A-33042679. References: N-CVE-2017-0336.EPSS0.86%5.5MediumCVE-2017-0353nvidia corporation · gpu display driver +1 morenvidia corporation gpu display driverAll versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where due to improper locking on certain conditions may lead to a denial of serviceEPSS0.28%7.8HighCVE-2017-0312nvidia corporation · windows gpu display driver +1 morenvidia corporation windows gpu display driverAll versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscapeID 0x100008b where user provided input is used as the limit for a loop may lead to denial of service or potential escalation of privilegesEPSS1.45%7.8HighCVE-2017-0341nvidia corporation · gpu display driver +1 morenvidia corporation gpu display driverAll versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where user provided input can trigger an access to a pointer that has not been initialized which may lead to denial of service or potential escalation of privileges.EPSS0.33%9.3CriticalCVE-2017-0333ubuntu · android +2 moreubuntu androidAn elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33899363. References: N-CVE-2017-0333.EPSS1.70%7.6HighCVE-2017-0339linux · linux_kernel +1 morelinux linux_kernelAn elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-27930566. References: N-CVE-2017-0339.EPSS1.84%9.3CriticalCVE-2017-6247google · android +1 moregoogle androidAn elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High due to the possibility of local arbitrary code execution in a privileged process in the kernel. Product: Android. Versions: N/A. Android ID: A-34386301. References: N-CVE-2017-6247.EPSS0.82%7.8HighCVE-2017-6277nvidia corporation · gpu display driver +1 morenvidia corporation gpu display driverNVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to denial of service or possible escalation of privileges.EPSS0.40%5.5MediumCVE-2017-6283google · android +2 moregoogle androidNVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to information disclosure. This issue is rated as high.EPSS0.15%7.5HighCVE-2017-6280ubuntu · linux +11 moreubuntu linuxNVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead to information disclosure. This issue is rated as moderate. Android: A-63851980.EPSS0.43%7HighCVE-2017-6296google · android +2 moregoogle androidNVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or possible escalation of privileges. This issue is rated as moderate.EPSS0.10%7.8HighCVE-2017-6294google · android +1 moregoogle androidIn Android before the 2018-06-05 security patch level, NVIDIA Tegra X1 TZ contains a possible out of bounds write due to missing bounds check which could lead to escalation of privilege from the kernel to the TZ. User interaction is not needed for exploitation. This issue is rated as high. Version: N/A. Android: A-69316825. Reference: N-CVE-2017-6294.EPSS0.16%7.8HighCVE-2017-6252nvidia corporation · nvidia windows gpu display driver +1 morenvidia corporation nvidia windows gpu display driverNVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler where a NULL pointer dereference may lead to a denial of service or potential escalation of privileges.EPSS0.33%8.8HighCVE-2017-6250nvidia corporation · geforce experience +1 morenvidia corporation geforce experienceNVIDIA GeForce Experience contains a vulnerability in NVIDIA Web Helper.exe, where untrusted script execution may lead to violation of application execution policy and local code execution.EPSS0.35%7.5HighCVE-2017-6275google · android +1 moregoogle androidAn information disclosure vulnerability exists in the Thermal Driver, where a missing bounds checking in the thermal driver could allow a read from an arbitrary kernel address. This issue is rated as moderate. Product: Pixel. Versions: N/A. Android ID: A-34702397. References: N-CVE-2017-6275.EPSS0.41%5.5MediumCVE-2017-6271nvidia corporation · gpu display driver +1 morenvidia corporation gpu display driverNVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation where untrusted user input is used as a divisor without validation while processing block linear information which may lead to a potential divide by zero and denial of service.EPSS0.33%8.4HighCVE-2017-6295google · android +2 moregoogle androidNVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high.EPSS0.14%7.8HighCVE-2017-6289google · android +1 moregoogle androidIn Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment (TEE) contains a memory corruption (due to unusual root cause) vulnerability, which if run within the speculative execution of the TEE, may lead to local escalation of privileges. This issue is rated as critical. Android: A-72830049. Reference: N-CVE-2017-6289.EPSS0.17%7.8HighCVE-2017-6278nvidia corporation · nvidia tegra +3 morenvidia corporation nvidia tegraNVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or write a buffer using an index or pointer that references a memory location after the end of the buffer, which may lead to a denial of service or possible escalation of privileges.EPSS0.32%