← Back

CVE-2015-5950

nvd nist
Published: Sep 30, 2015Modified: May 6, 2026

JSON object

Loading...
6.9
Vector
AV:L/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 3.4 / Impact: 10.0
Source: NVD

Description

The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call.

Affected (14)

Nvidia
2 products
Gpu Driver
Display Driver
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Gpu Driver
Up to 352.30
Configuration B
8 vulnerable
Vulnerable SoftwareAffected Versions
Nvidia
Display Driver
Up to 352.09
Display Driver
Version 304.108
Display Driver
Version 304.119
Display Driver
Version 304.121
Display Driver
Version 304.123
Display Driver
Version 304.125
Display Driver
Version 352.21
Display Driver
Version 352.30
Configuration C
5 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nvidia
Display Driver
Up to 352.86
Display Driver
Version 340.43
Display Driver
Version 340.52
Display Driver
Version 341.44
Display Driver
Version 353.06
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (12)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.