7.2
CVSSv2

CVE-2019-5666

Published: 27/02/2019 Updated: 09/05/2019
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) create context command DDI DxgkDdiCreateContext in which the product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array, which may lead to denial of service or escalation of privileges.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

nvidia gpu_driver -

Vendor Advisories

HP has been notified of potential security vulnerabilities with the GPU Display Driver for certain NVIDIA products These vulnerabilities may lead to denial of service, escalation of privileges, unauthorized code execution, or information disclosure ...
HP has been notified of potential security vulnerabilities with the GPU Display Driver for certain NVIDIA products These vulnerabilities may lead to denial of service, escalation of privileges, unauthorized code execution, or information disclosure ...