What is CVE-2019-5675?

CVE-2019-5675 is a high-severity vulnerability in Nvidia Gpu Driver, classified under Improper Synchronization. CVSS score: 7.8/10. Published 2019-05-10.

How severe is CVE-2019-5675?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Nvidia Gpu Driver

CVE-2019-5675

NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the product does not properly synchronize shared data, such as static variables across threads, which can lead to undefined behavior and unpredictable data changes, which may lead to denial of service, escalation of privileges, or information disclosure.

EPSS: 0.004 (31.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Nvidia Gpu_driver
Nvidia Gpu Display Driver — versions All

Weakness classification (CWE)

CWE-662 — Improper Synchronization

References

psirt@nvidia.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-5675?: CVE-2019-5675 is a high-severity vulnerability in Nvidia Gpu Driver, classified under Improper Synchronization. CVSS score: 7.8/10. Published 2019-05-10.
How severe is CVE-2019-5675?: High severity. CVSS v3 base score is 7.8 out of 10.