← Back

CVE-2017-0349

nvd nist
Published: May 9, 2017Modified: May 13, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointer passed from a user to the driver is not correctly validated before it is dereferenced for a write operation, may lead to denial of service or potential escalation of privileges.

Affected (1)

Products: Nvidia: Gpu Driver
Nvidia
1 product
Gpu Driver
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Gpu Driver
All versions
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-476
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

References (4)

Source: psirt@nvidia.com
Vendor Advisory
Source: psirt@nvidia.com
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.