Vulnerability Description
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation to read from or write to a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer, which may lead to denial of service or escalation of privileges.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nvidia | Gpu Driver | - |
| Microsoft | Windows | - |
Related Weaknesses (CWE)
References
- http://support.lenovo.com/us/en/solutions/LEN-26250
- https://nvidia.custhelp.com/app/answers/detail/a_id/4772PatchVendor Advisory
- http://support.lenovo.com/us/en/solutions/LEN-26250
- https://nvidia.custhelp.com/app/answers/detail/a_id/4772PatchVendor Advisory
FAQ
What is CVE-2019-5669?
CVE-2019-5669 is a vulnerability with a CVSS score of 7.8 (HIGH). NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation to read from or write to a buffer, but i...
How severe is CVE-2019-5669?
CVE-2019-5669 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-5669?
Check the references section above for vendor advisories and patch information. Affected products include: Nvidia Gpu Driver, Microsoft Windows.