Vulnerability Description
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x70000D4 which may lead to leaking of kernel memory contents to user space through an uninitialized buffer.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nvidia | Gpu Driver | >= 340, < 342.00 |
| Microsoft | Windows | All versions |
Related Weaknesses (CWE)
References
- http://nvidia.custhelp.com/app/answers/detail/a_id/4247PatchVendor Advisory
- http://www.securityfocus.com/bid/93982Third Party AdvisoryVDB Entry
- https://support.lenovo.com/us/en/solutions/LEN-10822Third Party Advisory
- https://www.exploit-db.com/exploits/40656/ExploitThird Party AdvisoryVDB Entry
- http://nvidia.custhelp.com/app/answers/detail/a_id/4247PatchVendor Advisory
- http://www.securityfocus.com/bid/93982Third Party AdvisoryVDB Entry
- https://support.lenovo.com/us/en/solutions/LEN-10822Third Party Advisory
- https://www.exploit-db.com/exploits/40656/ExploitThird Party AdvisoryVDB Entry
FAQ
What is CVE-2016-7386?
CVE-2016-7386 is a vulnerability with a CVSS score of 5.5 (MEDIUM). For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler f...
How severe is CVE-2016-7386?
CVE-2016-7386 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-7386?
Check the references section above for vendor advisories and patch information. Affected products include: Nvidia Gpu Driver, Microsoft Windows.