Login Request a demo
High severity · published Feb 27, 2019
CVE-2019-5666
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) create context command DDI DxgkDdiCreateContext in which the product uses…
7.8
CVSS
0.4%
EPSS
No
On KEV
Description
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) create context command DDI DxgkDdiCreateContext in which the product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array, which may lead to denial of service or escalation of privileges.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NG
NVIDIA GPU Graphics Driver · Nvidia Corporation
All versions, or not specified · source: vendor
GD
Gpu Driver · Nvidia
All versions, or not specified · source: NVD
Affected product
NG
NVIDIA GPU Graphics Driver
Nvidia Corporation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-5666
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-5666
support.lenovo.com
http://support.lenovo.com/us/en/solutions/LEN-26250
Patch
https://nvidia.custhelp.com/app/answers/detail/a_id/4772
nvidia.custhelp.com
https://nvidia.custhelp.com/app/answers/detail/a_id/4797
More from NVIDIA GPU Graphics Driver
7.8
CVE-2019-5665
NVIDIA Windows GPU Display driver contains a vulnerability in the 3D vision component in which the stereo service software, when opening a file, does not check for hard links
7.8
CVE-2019-5667
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiSetRootPageTable in which the application dereferences a…
7.8
CVE-2019-5668
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiSubmitCommandVirtual in which the application dereferences a…
7.8
CVE-2019-5669
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation to read from or…
7.8
CVE-2019-5670
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation to read from or…