Buffer overflow in Nvidia Geforce_910m

CVE-2016-8812

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before GFE 3.1.0.52 contains a vulnerability in the kernel mode layer (nvstreamkms.sys) allowing a user to cause a stack buffer…

Vulnerability class: Buffer Overflow

EPSS: 0.004 (59.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

  • 93986 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
  • 40660 (exploit, x_refsource_EXPLOIT-DB)
  • psirt@nvidia.com (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2016-8812?
CVE-2016-8812 is a high-severity vulnerability in Nvidia Geforce_910m, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 8.8/10. Published 2016-11-08.
How severe is CVE-2016-8812?
High severity. CVSS v3 base score is 8.8 out of 10.