
CVE-2021-1093 – Gentoo Linux Security Advisory 202310-02
https://notcve.org/view.php?id=CVE-2021-1093
21 Jul 2021 — NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary, and may lead to denial of service or system crash. Un controlador de pantalla de la GPU NVIDIA para Windows y Linux, contiene una vulnerabilidad en el firmware en la que el controlador contiene una sentencia assert() o similar que puede ser ... • https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html • CWE-404: Improper Resource Shutdown or Release •

CVE-2021-1095 – Gentoo Linux Security Advisory 202310-02
https://notcve.org/view.php?id=CVE-2021-1095
21 Jul 2021 — NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handlers for all control calls with embedded parameters where dereferencing an untrusted pointer may lead to denial of service. Un controlador de pantalla de la GPU de NVIDIA para Windows y Linux contiene una vulnerabilidad en los manejadores de la capa de modo del kernel (nvlddmkm.sys) para todas las llamadas de control con parámetros incrustados donde la referencia a un puntero no confiable pue... • https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html • CWE-476: NULL Pointer Dereference •

CVE-2021-1078
https://notcve.org/view.php?id=CVE-2021-1078
21 Apr 2021 — NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel driver (nvlddmkm.sys) where a NULL pointer dereference may lead to system crash. NVIDIA Windows GPU Display Driver para Windows, todas las versiones, contiene Una vulnerabilidad en el controlador del kernel (nvlddmkm.sys) donde una desreferencia del puntero NULL puede conllevar a un bloqueo del sistema • https://nvidia.custhelp.com/app/answers/detail/a_id/5172 • CWE-476: NULL Pointer Dereference •

CVE-2021-1075
https://notcve.org/view.php?id=CVE-2021-1075
21 Apr 2021 — NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the program dereferences a pointer that contains a location for memory that is no longer valid, which may lead to code execution, denial of service, or escalation of privileges. Attacker does not have any control over the information and may conduct limited data modification. El controlador de pantalla de la GPU de NVIDIA para Windows, en todas sus ver... • https://nvidia.custhelp.com/app/answers/detail/a_id/5172 • CWE-476: NULL Pointer Dereference •

CVE-2021-1074
https://notcve.org/view.php?id=CVE-2021-1074
21 Apr 2021 — NVIDIA GPU Display Driver for Windows installer contains a vulnerability where an attacker with local unprivileged system access may be able to replace an application resource with malicious files. This attack requires a user with system administration rights to execute the installer and requires the attacker to replace the files in a very short time window between file integrity validation and execution. Such an attack may lead to code execution, escalation of privileges, denial of service, and information... • https://nvidia.custhelp.com/app/answers/detail/a_id/5172 •

CVE-2021-1077 – Gentoo Linux Security Advisory 202310-02
https://notcve.org/view.php?id=CVE-2021-1077
21 Apr 2021 — NVIDIA GPU Display Driver for Windows and Linux, R450 and R460 driver branch, contains a vulnerability where the software uses a reference count to manage a resource that is incorrectly updated, which may lead to denial of service. NVIDIA GPU Display Driver para Windows y Linux, la rama del controlador R450 y R460, contiene Una vulnerabilidad en la que el software usa un recuento de referencia para administrar un recurso que se actualiza inapropiadamente, lo que puede llevar a la denegación de servicio It w... • https://nvidia.custhelp.com/app/answers/detail/a_id/5172 • CWE-404: Improper Resource Shutdown or Release •

CVE-2021-1076 – Gentoo Linux Security Advisory 202310-02
https://notcve.org/view.php?id=CVE-2021-1076
21 Apr 2021 — NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys or nvidia.ko) where improper access control may lead to denial of service, information disclosure, or data corruption. NVIDIA GPU Display Driver para Windows y Linux, todas las versiones, contiene Una vulnerabilidad en la capa del modo kernel (nvlddmkm.sys o nvidia.ko) donde un control de acceso inapropiado puede conllevar a una denegación de servicio, divulgación de información o c... • https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html •

CVE-2020-5966
https://notcve.org/view.php?id=CVE-2020-5966
25 Jun 2020 — NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, in which a NULL pointer is dereferenced, leading to denial of service or potential escalation of privileges. NVIDIA Windows GPU Display Driver, todas las versiones, contiene una vulnerabilidad en el manejador de capa del modo kernel (nvlddmkm.sys) para DxgkDdiEscape, en el que un puntero NULL es desreferenciado, lo que conduce a una denegación de servicio o una posible... • https://nvidia.custhelp.com/app/answers/detail/a_id/5031 • CWE-476: NULL Pointer Dereference •

CVE-2019-5676
https://notcve.org/view.php?id=CVE-2019-5676
10 May 2019 — NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), leading to escalation of privileges through code execution. El software controlador de la GPU NVIDIA Windows Display para Windows (todas las versiones) contiene una vulnerabilidad en la que carga incorrectamente las DLL del sistema Windows sin validar la ruta o la f... • https://nvidia.custhelp.com/app/answers/detail/a_id/4797 • CWE-427: Uncontrolled Search Path Element •

CVE-2015-5950 – HP Security Bulletin HPSBHF03513
https://notcve.org/view.php?id=CVE-2015-5950
28 Sep 2015 — The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call. Vulnerabilidad en el controlador de pantalla NVIDIA R352 en versiones anteriores a 353.82 y R340 en versiones anteriores a 341.81 en Windows; R304 en versiones anteriores a 304.128, R340 ... • http://nvidia.custhelp.com/app/answers/detail/a_id/3763/~/cve-2015-5950-memory-corruption-due-to-an-unsanitized-pointer-in-the-nvidia • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •