← Back

CVE-2015-7869

nvd nist
Published: Nov 24, 2015Modified: May 6, 2026

JSON object

Loading...
6.6
Vector
AV:L/AC:M/Au:N/C:C/I:P/A:C
Exploitability: 3.4 / Impact: 9.5
Source: NVD

Description

Multiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows and R304 before 304.131, R340 before 340.96, R352 before 352.63, and R358 before 358.16 on Linux allow local users to obtain sensitive information, cause a denial of service (crash), or possibly gain privileges via unknown vectors, which trigger uninitialized or out of bounds memory access. NOTE: this identifier has been SPLIT per ADT2 and ADT3 due to different vulnerability type and affected versions. See CVE-2015-8328 for the vulnerability in the NVAPI support layer in NVIDIA drivers for Windows.

Affected (12)

1 product
Ubuntu Linux
1 product
Gpu Driver
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Version 12.04
Version 14.04
Version 15.04
Version 15.10
Configuration B
5 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nvidia
From 304 to 304.131
From 340 to 340.96
From 352 to 352.63
From 358 to 358.16
Version 346.22
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Configuration C
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nvidia
From 340 to 341.96
From 352 to 354.35
From 358 to 358.87
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

References (8)

Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVendor Advisory

Timeline

No history available yet.