Published: 08/11/2016 Updated: 07/03/2019

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 215

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 prior to 342.00 and R375 prior to 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x70000D4 which may lead to leaking of kernel memory contents to user space through an uninitialized buffer.

Vulnerable Product	Search on Vulmon	Subscribe to Product
nvidia gpu_driver

Source: bugschromiumorg/p/project-zero/issues/detail?id=892 The handler for the DxgkDdiEscape escape code 0x70000D4 has the following pseudocode: void __fastcall escape_70000D4(NvMiniportDeviceContext *a1, NvEscapeData *a2) { Escape70000D4 *escape_data_; // rbx@1 PVOID alloc_buf; // rsi@1 unsigned int v4; // edi@1 __int64 user_p ...

CWE-200 http://nvidia.custhelp.com/app/answers/detail/a_id/4247 http://www.securityfocus.com/bid/93982 https://support.lenovo.com/us/en/solutions/LEN-10822 https://www.exploit-db.com/exploits/40656/https://nvd.nist.gov https://www.exploit-db.com/exploits/40656/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2016-7386

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect