CVE-2016-8808
Last modified
CVE-2016-8808 is a vulnerability of currently unknown severity. For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x70000d5 where a value passed from an user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges.. EPSS estimates a 1.60% chance of exploitation in the next 30 days.
Description
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x70000d5 where a value passed from an user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Nvidia | Gpu Driver | >= 340, < 342.00 |
| Nvidia | Gpu Driver | >= 375, < 375.63 |
References
- http://nvidia.custhelp.com/app/answers/detail/a_id/4247Patch, Vendor Advisory
- http://www.securityfocus.com/bid/93999Third Party Advisory, VDB Entry
- https://support.lenovo.com/us/en/solutions/LEN-10822Third Party Advisory
- https://www.exploit-db.com/exploits/40666/Third Party Advisory, VDB Entry
- http://nvidia.custhelp.com/app/answers/detail/a_id/4247Patch, Vendor Advisory
- http://www.securityfocus.com/bid/93999Third Party Advisory, VDB Entry
- https://support.lenovo.com/us/en/solutions/LEN-10822Third Party Advisory
- https://www.exploit-db.com/exploits/40666/Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-8808?
How severe is CVE-2016-8808?
How do I fix CVE-2016-8808?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-8801Huawei OceanStor 5600 V3 with V300R003C00C10 and earlier ver…
- CVE-2016-8802The security policy processing module in Huawei Secospace US…
- CVE-2016-8803The maintenance module in Huawei FusionStorage V100R003C30U1…
- CVE-2016-8805For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Win…
- CVE-2016-8806For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Win…
- CVE-2016-8807For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Win…
- CVE-2016-8809For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Win…
- CVE-2016-8810For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Win…
- CVE-2016-8811For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Win…
- CVE-2016-8812For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeF…
- CVE-2016-8813All versions of NVIDIA Windows GPU Display Driver contain a …
- CVE-2016-8814All versions of NVIDIA Windows GPU Display Driver contain a …
Are you affected by CVE-2016-8808?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST