CVE-2017-0347

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array, which may lead to denial of service or potential escalation of privileges.

Score

CVSS 3.0 7.8 High

Status

Modified - psirt@nvidia.com

Published

2017-05-09

Last modified

2024-08-05

Weaknesses

CWE-129

Affected products

• Gpu Driver (Nvidia)
• Gpu Display Driver (Nvidia Corporation)

References

• http://nvidia.custhelp.com/app/answers/detail/a_id/4462