CVE-2017-0314

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual) where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to denial of service or escalation of privileges.

Score

CVSS 3.0 7.8 High

Status

Modified - psirt@nvidia.com

Published

2017-02-15

Last modified

2024-08-05

Weaknesses

CWE-119

Affected products

• Gpu Driver (Nvidia)
• Windows Gpu Display Driver (Nvidia Corporation)

References

• http://nvidia.custhelp.com/app/answers/detail/a_id/4398