CVE-2017-0309

Published: Feb 15, 2017Modified: May 13, 2026

8.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.0 / Impact: 6.0

Source: NVD

Description

All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where multiple integer overflows may cause improper memory allocation leading to a denial of service or potential escalation of privileges.

Affected (1)

Products: Nvidia: Gpu Driver

Nvidia

1 product

Gpu Driver

Configuration A

1 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Nvidia Gpu Driver	All versions

Running on/with	Platform Versions
Freebsd Freebsd	All versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions
Oracle Solaris	All versions

Related CWEs

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (2)

http://nvidia.custhelp.com/app/answers/detail/a_id/4398

Source: psirt@nvidia.com

Vendor Advisory

http://nvidia.custhelp.com/app/answers/detail/a_id/4398

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.