Vulnerability Description
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x70001b2 where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nvidia | Gpu Driver | >= 340, < 342.00 |
| Microsoft | Windows | All versions |
Related Weaknesses (CWE)
References
- http://nvidia.custhelp.com/app/answers/detail/a_id/4247PatchVendor Advisory
- http://www.securityfocus.com/bid/93992Third Party AdvisoryVDB Entry
- https://support.lenovo.com/us/en/solutions/LEN-10822Third Party Advisory
- https://www.exploit-db.com/exploits/40664/Third Party AdvisoryVDB Entry
- http://nvidia.custhelp.com/app/answers/detail/a_id/4247PatchVendor Advisory
- http://www.securityfocus.com/bid/93992Third Party AdvisoryVDB Entry
- https://support.lenovo.com/us/en/solutions/LEN-10822Third Party Advisory
- https://www.exploit-db.com/exploits/40664/Third Party AdvisoryVDB Entry
FAQ
What is CVE-2016-8809?
CVE-2016-8809 is a vulnerability with a CVSS score of 7.8 (HIGH). For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler f...
How severe is CVE-2016-8809?
CVE-2016-8809 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-8809?
Check the references section above for vendor advisories and patch information. Affected products include: Nvidia Gpu Driver, Microsoft Windows.