CVE-2016-4960

For the NVIDIA Quadro, NVS, and GeForce products, the NVIDIA NVStreamKMS.sys service component is improperly validating user-supplied data through its API entry points causing an elevation of privilege.

Score

CVSS 3.0 7.3 High

Status

Modified - psirt@nvidia.com

Published

2016-11-08

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Geforce Experience (Nvidia)

References

• http://nvidia.custhelp.com/app/answers/detail/a_id/4213
• http://www.securityfocus.com/bid/93251
• https://support.lenovo.com/us/en/product_security/ps500070