Buffer overflow in NVIDIA Geforce 910m
CVE-2016-8812
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before GFE 3.1.0.52 contains a vulnerability in the kernel mode layer (nvstreamkms.sys) allowing a user to cause a stack buffer overflow with specially crafted executable paths, leading to a denial of service or escalation of privileges.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.016 (75.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 76th percentile — 75.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.016 · newest: 0.016 · change: -0.000
Affected products
Weakness classification (CWE)
References
- www.securityfocus.com/bid/93986 (VDB Entry, Third Party Advisory, vdb-entry)
- www.exploit-db.com/exploits/40660/ (exploit)
- nvidia.custhelp.com/app/answers/detail/a_id/4247 (Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2016-8812?
- CVE-2016-8812 is a high-severity vulnerability in NVIDIA Geforce 910m, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 8.8/10. Published 2016-11-08.
- How severe is CVE-2016-8812?
- High severity. CVSS v3 base score is 8.8 out of 10.