Unscored severity · published Sep 30, 2015
CVE-2015-5950
The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DD
Display Driver · Nvidia
through 352.09; 304.108; 304.119; 304.121; 304.123; 304.125; +7 more · source: NVD
GD
Gpu Driver · Nvidia
through 352.30 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-5950
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-5950
Vendor Advisory
http://nvidia.custhelp.com/app/answers/detail/a_id/3763/~/cve-2015-5950-memory-corruption-due-to-an-unsanitized-pointer-in-the-nvidia
www.securitytracker.com
http://www.securitytracker.com/id/1033662
www.ubuntu.com
http://www.ubuntu.com/usn/USN-2747-1
h20564.www2.hpe.com
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04815468
h20566.www2.hp.com
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04815468
support.lenovo.com
https://support.lenovo.com/us/en/product_security/len_3313
More from Display Driver
7.8
CVE-2012-0951
A Memory Corruption Vulnerability exists in NVIDIA Graphics Drivers 29549 due to an unknown function in the file proc/driver/nvidia/registry
5.0
CVE-2012-0953
A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace
5.0
CVE-2012-0952
A heap buffer overflow was discovered in the device control ioctl in the Linux driver for Nvidia graphics cards, which may allow an attacker to overflow 49 bytes
–
CVE-2013-0109
The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not properly handle exceptions, which allows local users to…