
CVE-2021-1051
https://notcve.org/view.php?id=CVE-2021-1051
08 Jan 2021 — NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which a local user can get elevated privileges to modify display configuration data, which may result in denial of service of the display. NVIDIA GPU Display Driver para Windows contiene una vulnerabilidad en el manejador de la capa de modo del kernel (nvlddmkm.sys) para DxgkDdiEscape en la que un usuario local puede obtener privilegios elevados para modificar los datos de conf... • https://nvidia.custhelp.com/app/answers/detail/a_id/5142 • CWE-269: Improper Privilege Management •

CVE-2021-1052 – Gentoo Linux Security Advisory 202310-02
https://notcve.org/view.php?id=CVE-2021-1052
08 Jan 2021 — NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which user-mode clients can access legacy privileged APIs, which may lead to denial of service, escalation of privileges, and information disclosure. NVIDIA GPU Display Driver para Windows y Linux, todas las versiones, contiene una vulnerabilidad en el manejador de la capa del modo kernel (nvlddmkm.sys) para la función DxgkDdiEscape o IOCTL en ... • https://nvidia.custhelp.com/app/answers/detail/a_id/5142 •

CVE-2021-1053 – Gentoo Linux Security Advisory 202310-02
https://notcve.org/view.php?id=CVE-2021-1053
08 Jan 2021 — NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which improper validation of a user pointer may lead to denial of service. NVIDIA GPU Display Driver para Windows y Linux, todas las versiones, contiene una vulnerabilidad en el manejador de la capa del modo kernel (nvlddmkm.sys) para la función DxgkDdiEscape o IOCTL en la que la comprobación inapropiada de un puntero de usuario puede conllevar... • https://nvidia.custhelp.com/app/answers/detail/a_id/5142 • CWE-20: Improper Input Validation •

CVE-2021-1056 – Gentoo Linux Security Advisory 202310-02
https://notcve.org/view.php?id=CVE-2021-1056
08 Jan 2021 — NVIDIA GPU Display Driver for Linux, all versions, contains a vulnerability in the kernel mode layer (nvidia.ko) in which it does not completely honor operating system file system permissions to provide GPU device-level isolation, which may lead to denial of service or information disclosure. NVIDIA GPU Display Driver para Linux, todas las versiones, contiene una vulnerabilidad en la capa del modo kernel (nvidia.ko) en la que no respeta completamente los permisos del sistema de archivos del sistema operativ... • https://github.com/pokerfaceSad/CVE-2021-1056 • CWE-276: Incorrect Default Permissions •

CVE-2020-5966
https://notcve.org/view.php?id=CVE-2020-5966
25 Jun 2020 — NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, in which a NULL pointer is dereferenced, leading to denial of service or potential escalation of privileges. NVIDIA Windows GPU Display Driver, todas las versiones, contiene una vulnerabilidad en el manejador de capa del modo kernel (nvlddmkm.sys) para DxgkDdiEscape, en el que un puntero NULL es desreferenciado, lo que conduce a una denegación de servicio o una posible... • https://nvidia.custhelp.com/app/answers/detail/a_id/5031 • CWE-476: NULL Pointer Dereference •

CVE-2020-5961
https://notcve.org/view.php?id=CVE-2020-5961
12 Mar 2020 — NVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource clean up on a failure path can impact the guest VM, leading to denial of service. El controlador de gráficos NVIDIA vGPU para un Sistema Operativo invitado, presenta una vulnerabilidad en la cual una limpieza de recursos incorrecta en una ruta fallida puede impactar a la VM invitada, conllevando una denegación del servicio. • https://nvidia.custhelp.com/app/answers/detail/a_id/4996 • CWE-459: Incomplete Cleanup •

CVE-2019-5695
https://notcve.org/view.php?id=CVE-2019-5695
12 Nov 2019 — NVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions) contains a vulnerability in the local service provider component in which an attacker with local system and privileged access can incorrectly load Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), which may lead to denial of service or information disclosure through code execution. NVIDIA GeForce Experience (versiones anteriores a 3.20.1) y Windows ... • https://nvidia.custhelp.com/app/answers/detail/a_id/4860 • CWE-427: Uncontrolled Search Path Element •

CVE-2019-5694
https://notcve.org/view.php?id=CVE-2019-5694
09 Nov 2019 — NVIDIA Windows GPU Display Driver, R390 driver version, contains a vulnerability in NVIDIA Control Panel in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), which may lead to denial of service or information disclosure through code execution. The attacker requires local system access. NVIDIA Windows GPU Display Driver, versión del controlador R390, contiene una vulnerabilidad en el Panel de control de NVIDIA e... • https://nvidia.custhelp.com/app/answers/detail/a_id/4907 • CWE-427: Uncontrolled Search Path Element •

CVE-2019-5693
https://notcve.org/view.php?id=CVE-2019-5693
09 Nov 2019 — NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) in which the program accesses or uses a pointer that has not been initialized, which may lead to denial of service. NVIDIA Windows GPU Display Driver, todas las versiones, contiene una vulnerabilidad en la capa del modo kernel (biblioteca nvlddmkm.sys) en la que el programa accede o utiliza un puntero que no ha sido inicializado, lo que puede conllevar a una denegación de servicio. • https://nvidia.custhelp.com/app/answers/detail/a_id/4907 • CWE-824: Access of Uninitialized Pointer •

CVE-2019-5692
https://notcve.org/view.php?id=CVE-2019-5692
09 Nov 2019 — NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the product uses untrusted input when calculating or using an array index, which may lead to escalation of privileges or denial of service. NVIDIA Windows GPU Display Driver, todas las versiones, contiene una vulnerabilidad en el manejador de la capa del modo kernel (biblioteca nvlddmkm.sys) para la función DxgkDdiEscape en la que el producto usa una entrada no... • https://nvidia.custhelp.com/app/answers/detail/a_id/4907 • CWE-129: Improper Validation of Array Index •