CVE-2019-5692

HIGH

7.8

Description

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the product uses untrusted input when calculating or using an array index, which may lead to escalation of privileges or denial of service.

Details CVE

Score CVSS v3.17.8

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueLOCAL

ComplexiteLOW

Privileges requisLOW

Interaction utilisateurNONE

Publie11/9/2019

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

microsoft:windowsnvidia:gpu_driver

Faiblesses (CWE)

CWE-129

References

https://nvidia.custhelp.com/app/answers/detail/a_id/4907(psirt@nvidia.com)

https://nvidia.custhelp.com/app/answers/detail/a_id/4907(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.