NVIDIA Corporation
139 CVEs across 16 NVIDIA Corporation products. Browse NVIDIA Corporation vulnerabilities, severities, and proof-of-concept exploits.
NVIDIA Corporation products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-5674 | High | 7.0 | 2019-03-28 | NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the system and creates… |
CVE-2019-5671 | Medium | 5.5 | 2019-02-27 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the software does not rel… |
CVE-2019-5670 | High | 7.8 | 2019-02-27 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation… |
CVE-2019-5669 | High | 7.8 | 2019-02-27 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation… |
CVE-2019-5668 | High | 7.8 | 2019-02-27 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiSubmitCommandVirtual in which the applica… |
CVE-2019-5667 | High | 7.8 | 2019-02-27 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiSetRootPageTable in which the application… |
CVE-2019-5666 | High | 7.8 | 2019-02-27 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) create context command DDI DxgkDdiCreateContext in which the… |
CVE-2019-5665 | High | 7.8 | 2019-02-27 | NVIDIA Windows GPU Display driver contains a vulnerability in the 3D vision component in which the stereo service software, when opening a file, does not check… |
CVE-2018-6271 | High | 7.8 | 2019-02-13 | NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software delivers extra data with the buffer and does not properly validated the e… |
CVE-2018-6268 | High | 7.8 | 2019-02-13 | NVIDIA Tegra library contains a vulnerability in libnvmmlite_video.so, where referencing memory after it has been freed may lead to denial of service or possib… |
CVE-2018-6267 | High | 7.8 | 2019-02-13 | NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software does not validate or incorrectly validates input that can affect the cont… |
CVE-2018-6241 | High | 7.8 | 2019-01-31 | NVIDIA Tegra Gralloc module contains a vulnerability in driver in which it does not validate input parameter of the registerbuffer API, which may lead to arbit… |
CVE-2018-6266 | Medium | 5.5 | 2018-11-27 | NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows where a local user may obtain third party integration parameters, w… |
CVE-2018-6265 | High | 7.8 | 2018-11-27 | NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 during application installation on Windows 7 in elevated privilege mode, where… |
CVE-2018-6263 | High | 7.8 | 2018-11-27 | NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows in which an attacker who has access to a local user account can pla… |
CVE-2018-6260 | Medium | 5.5 | 2018-11-13 | NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU perfor… |
CVE-2018-6262 | Low | 2.5 | 2018-10-02 | NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled where limited sensitive user information may be available to users… |
CVE-2018-6261 | High | 7.0 | 2018-10-02 | NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled which sets incorrect permissions on a file, which may to code execu… |
CVE-2018-6259 | Low | 2.5 | 2018-08-31 | NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled, an attacker has system access, and certai… |
CVE-2018-6258 | Medium | 4.7 | 2018-08-31 | NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability during GameStream installation where an attacker who has system acces… |
CVE-2018-6257 | High | 7.0 | 2018-08-31 | NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled where improper access control may lead to… |
CVE-2017-6294 | High | 7.8 | 2018-06-07 | In Android before the 2018-06-05 security patch level, NVIDIA Tegra X1 TZ contains a possible out of bounds write due to missing bounds check which could lead… |
CVE-2017-6292 | High | 7.8 | 2018-06-07 | In Android before the 2018-06-05 security patch level, NVIDIA TLZ TrustZone contains a possible out of bounds write due to integer overflow which could lead to… |
CVE-2017-6290 | High | 7.8 | 2018-06-07 | In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due to an integer overflow which could lead… |
CVE-2018-6254 | Low | 3.3 | 2018-05-10 | In Android before the 2018-05-05 security patch level, NVIDIA Media Server contains an out-of-bounds read (due to improper input validation) vulnerability whic… |
CVE-2018-6246 | Medium | 5.3 | 2018-05-10 | In Android before the 2018-05-05 security patch level, NVIDIA Widevine Trustlet contains a vulnerability in Widevine TA where the software reads data past the… |
CVE-2017-6293 | High | 7.8 | 2018-05-10 | In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes data past the end… |
CVE-2017-6289 | High | 7.8 | 2018-05-10 | In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment (TEE) contains a memory corruption (due to unusual root cause) vuln… |
CVE-2018-6242 | Medium | 6.8 | 2018-05-01 | Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery Mode (RCM). An attacker with physical ac… |
CVE-2018-6253 | Medium | 5.5 | 2018-04-02 | NVIDIA GPU Display Driver contains a vulnerability in the DirectX and OpenGL Usermode drivers where a specially crafted pixel shader can cause infinite recursi… |
CVE-2018-6252 | Medium | 5.5 | 2018-04-02 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape where the software allows an actor access to rest… |
CVE-2018-6251 | High | 7.8 | 2018-04-02 | NVIDIA Windows GPU Display Driver contains a vulnerability in the DirectX 10 Usermode driver, where a specially crafted pixel shader can cause writing to unall… |
CVE-2018-6250 | High | 8.8 | 2018-04-02 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a NULL pointer dereference o… |
CVE-2018-6249 | High | 8.8 | 2018-04-02 | NVIDIA GPU Display Driver contains a vulnerability in kernel mode layer handler where a NULL pointer dereference may lead to denial of service or potential esc… |
CVE-2018-6248 | High | 8.8 | 2018-04-02 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape where the software uses a sequential operation to… |
CVE-2018-6247 | High | 8.8 | 2018-04-02 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a NULL pointer dereference m… |
CVE-2017-6278 | High | 7.8 | 2018-03-26 | NVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or write a buffer using an index or pointer t… |
CVE-2017-6288 | Medium | 5.5 | 2018-03-12 | NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is rated as mo… |
CVE-2017-6287 | Medium | 5.5 | 2018-03-12 | NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is rated as mo… |
CVE-2017-6286 | High | 7.8 | 2018-03-12 | NVIDIA libnvomx contains a possible out of bounds write due to a missing bounds check which could lead to local escalation of privilege. This issue is rated as… |
CVE-2017-6285 | Medium | 5.5 | 2018-03-12 | NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This issue is rated as mo… |
CVE-2017-6281 | High | 7.8 | 2018-03-12 | NVIDIA libnvomx contains a possible out of bounds write due to a improper input validation which could lead to local escalation of privilege. This issue is rat… |
CVE-2017-6296 | High | 7.0 | 2018-03-06 | NVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or possible escalation of privileges. This iss… |
CVE-2017-6295 | High | 8.4 | 2018-03-06 | NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end, or before the beginning, of the… |
CVE-2017-6284 | Medium | 5.5 | 2018-03-06 | NVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG) where the DRBG does not properly initialize and store or trans… |
CVE-2017-6283 | Medium | 5.5 | 2018-03-06 | NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to… |
CVE-2017-6282 | High | 7.8 | 2018-03-06 | NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary value to an arbitrary location which may l… |
CVE-2017-6280 | High | 7.5 | 2018-03-06 | NVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead to information disclosure. This issue is rated as moderate. And… |
CVE-2017-6279 | High | 7.8 | 2018-02-06 | NVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in media server which may cause an out of bounds write and could lead… |
CVE-2017-6258 | High | 7.8 | 2018-02-06 | NVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in media server which may cause an out of bounds write and could lead… |
CVE-2017-6276 | High | 7.8 | 2017-12-06 | NVIDIA mediaserver contains a vulnerability where it is possible a use after free malfunction can occur due to an incorrect bounds check which could enable una… |
CVE-2017-6263 | High | 7.8 | 2017-12-06 | NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to improper usage of the list_for_each kernel macro whic… |
CVE-2017-6262 | High | 7.0 | 2017-12-06 | NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to a race condition which could enable unauthorized code… |
CVE-2017-6264 | High | 7.8 | 2017-11-14 | An elevation of privilege vulnerability exists in the NVIDIA GPU driver (gm20b_clk_throt_set_cdev_state), where an out of bound memory read is used as a functi… |
CVE-2017-6275 | High | 7.5 | 2017-11-14 | An information disclosure vulnerability exists in the Thermal Driver, where a missing bounds checking in the thermal driver could allow a read from an arbitrar… |
CVE-2017-6274 | Critical | 9.8 | 2017-11-14 | An elevation of Privilege vulnerability exists in the Thermal Driver, where a missing bounds checks in the thermal throttle driver can cause an out-of-bounds w… |
CVE-2017-6273 | High | 7.8 | 2017-10-17 | NVIDIA ADSP Firmware contains a vulnerability in the ADSP Loader component where there is the potential to write to a memory location that is outside the inten… |
CVE-2017-0316 | High | 7.8 | 2017-10-16 | In GeForce Experience (GFE) 3.x before 3.10.0.55, NVIDIA Installer Framework contains a vulnerability in NVISystemService64 where a value passed from a user to… |
CVE-2017-6277 | High | 7.8 | 2017-09-22 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user t… |
CVE-2017-6272 | High | 7.8 | 2017-09-22 | NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated a… |
CVE-2017-6271 | Medium | 5.5 | 2017-09-22 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation where untrusted user input is used as a… |
CVE-2017-6270 | Medium | 5.5 | 2017-09-22 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation where untrusted user input is used as a… |
CVE-2017-6269 | High | 7.8 | 2017-09-22 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointer passed from a user… |
CVE-2017-6268 | High | 7.8 | 2017-09-22 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user t… |
CVE-2017-6267 | Medium | 5.5 | 2017-09-22 | NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an incorrect initialization of internal objects can cause an infinite… |
CVE-2017-6266 | Medium | 5.5 | 2017-09-22 | NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where improper access controls could allow unprivileged users to cause a de… |
CVE-2017-6260 | Medium | 6.5 | 2017-07-28 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer helper function where an incorrect calculation of string length may lead to… |
CVE-2017-6259 | Medium | 6.1 | 2017-07-28 | NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an incorrect detection and recovery from an invalid state produced by… |
CVE-2017-6257 | High | 8.8 | 2017-07-28 | NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a NULL pointer dereference may lead to denial of service or potential… |
CVE-2017-6256 | High | 7.8 | 2017-07-28 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user t… |
CVE-2017-6255 | High | 7.8 | 2017-07-28 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where an improper input parameter… |
CVE-2017-6254 | High | 7.8 | 2017-07-28 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointer passed from an use… |
CVE-2017-6252 | High | 7.8 | 2017-07-28 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler where a NULL pointer dereference may lead to a denial of service or… |
CVE-2017-6251 | High | 7.8 | 2017-07-28 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler where a missing permissions check may allow users to gain access to… |
CVE-2017-0340 | High | 7.8 | 2017-07-07 | An elevation of privilege vulnerability in the NVIDIA Libnvparser component due to a memcpy into a fixed sized buffer with a user-controlled size could lead to… |
CVE-2017-0326 | Medium | 5.5 | 2017-07-07 | An information disclosure vulnerability in the NVIDIA Video Driver due to an out-of-bounds read function in the Tegra Display Controller driver could result in… |
CVE-2017-6247 | High | 7.8 | 2017-07-06 | An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of t… |
CVE-2017-0355 | Medium | 5.5 | 2017-05-09 | All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where it may access paged memo… |
CVE-2017-0354 | Medium | 4.7 | 2017-05-09 | All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where a call to certain functi… |
CVE-2017-0353 | Medium | 5.5 | 2017-05-09 | All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where due to improper locking on certai… |
CVE-2017-0352 | High | 7.8 | 2017-05-09 | All versions of the NVIDIA GPU Display Driver contain a vulnerability in the GPU firmware where incorrect access control may allow CPU access sensitive GPU con… |
CVE-2017-0351 | High | 7.8 | 2017-05-09 | All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user… |
CVE-2017-0350 | High | 7.8 | 2017-05-09 | All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not co… |
CVE-2017-0349 | High | 7.8 | 2017-05-09 | All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointer… |
CVE-2017-0348 | High | 7.8 | 2017-05-09 | All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where a NULL pointer dereference… |
CVE-2017-0347 | High | 7.8 | 2017-05-09 | All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value p… |
CVE-2017-0346 | High | 7.8 | 2017-05-09 | All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the size… |
CVE-2017-0345 | High | 7.8 | 2017-05-09 | All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where user provi… |
CVE-2017-0344 | High | 7.8 | 2017-05-09 | All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape may allow users… |
CVE-2017-0343 | High | 7.0 | 2017-05-09 | All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) where user can trigger a race condition d… |
CVE-2017-0342 | High | 7.8 | 2017-05-09 | All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where incorrect calculation may c… |
CVE-2017-0341 | High | 7.8 | 2017-05-09 | All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where user provi… |
CVE-2017-6250 | High | 8.8 | 2017-04-28 | NVIDIA GeForce Experience contains a vulnerability in NVIDIA Web Helper.exe, where untrusted script execution may lead to violation of application execution po… |
CVE-2017-0339 | High | 7.0 | 2017-04-05 | An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0332 | High | 7.0 | 2017-04-05 | An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0330 | Medium | 4.7 | 2017-04-05 | An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2017-0329 | High | 7.0 | 2017-04-05 | An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver could enable a local malicious application to execute arbitrar… |
CVE-2017-0328 | Medium | 4.7 | 2017-04-05 | An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2017-0327 | High | 7.0 | 2017-04-05 | An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0325 | High | 7.0 | 2017-04-05 | An elevation of privilege vulnerability in the NVIDIA I2C HID driver could enable a local malicious application to execute arbitrary code within the context of… |