CVE-2015-5950: nvidia display_driver

Vulnerability summary

CVE-2015-5950 is a medium (CVSS 6.9) vulnerability in nvidia display_driver. EPSS estimates a 0.36% chance of exploitation in the next 30 days, higher than 28.7% of scored vulnerabilities.

Timeline

1. 29-09-2015
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call.

• CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.