Unchecked Input/Output Lengths in NVIDIA Windows GPU Display Driver R340 and R375: Denial of Service and Privilege Escalation Vulnerability

CVE-2016-7384 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) where unchecked input/output lengths in UVMLiteController Device IO Control handling may lead to denial of service or potential escalation of privileges.

Learn more about our Web Application Penetration Testing UK.