CVE-2016-7390

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x7000194 where a value passed from a user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges.

• CWE-264

• http://nvidia.custhelp.com/app/answers/detail/a_id/4247Patch, Vendor Advisory
• http://www.securityfocus.com/bid/93984Third Party Advisory, VDB Entry
• https://support.lenovo.com/us/en/solutions/LEN-10822Third Party Advisory
• https://www.exploit-db.com/exploits/40658/Third Party Advisory, VDB Entry
• http://nvidia.custhelp.com/app/answers/detail/a_id/4247Patch, Vendor Advisory
• http://www.securityfocus.com/bid/93984Third Party Advisory, VDB Entry
• https://support.lenovo.com/us/en/solutions/LEN-10822Third Party Advisory
• https://www.exploit-db.com/exploits/40658/Third Party Advisory, VDB Entry

Published

Nov 8, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-7384For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Win…
• CVE-2016-7385For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Win…
• CVE-2016-7386For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Win…
• CVE-2016-7387For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Win…
• CVE-2016-7388For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Win…
• CVE-2016-7389For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVI…
• CVE-2016-7391For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Win…
• CVE-2016-7392Heap-based buffer overflow in the pstoedit_suffix_table_init…
• CVE-2016-7393Stack-based buffer overflow in the aac_sync function in aac_…
• CVE-2016-7394tiki wiki cms groupware <=15.2 has a xss vulnerability, allo…
• CVE-2016-7395SkPath.cpp in Skia, as used in Google Chrome before 53.0.278…
• CVE-2016-7397The Frontend component in Sophos UTM with firmware 9.405-5 a…