CVE-2020-5964
Last modified
CVE-2020-5964 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure.. EPSS estimates a 0.33% chance of exploitation in the next 30 days.
Description
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Nvidia | Quadro Firmware | >= 390, < 392.61 |
| Nvidia | Quadro Firmware | >= 418, < 426.78 |
| Nvidia | Quadro Firmware | >= 440, < 443.18 |
| Nvidia | Quadro Firmware | >= 450, < 451.48 |
| Nvidia | Tesla Firmware | >= 418, < 426.78 |
| Nvidia | Tesla Firmware | >= 440, < 443.18 |
| Nvidia | Tesla Firmware | >= 450, < 451.48 |
| Nvidia | Geforce Experience | < 3.20.4 |
| Nvidia | Nvs Firmware | >= 390, < 392.61 |
| Nvidia | Nvs Firmware | >= 418, < 426.78 |
| Nvidia | Nvs Firmware | >= 440, < 443.18 |
| Nvidia | Nvs Firmware | >= 450, < 451.48 |
| Nvidia | Geforce Firmware | >= 450, < 451.48 |
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5031Vendor Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5038Vendor Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5031Vendor Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5038Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-5964?
How severe is CVE-2020-5964?
How do I fix CVE-2020-5964?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-5958NVIDIA Windows GPU Display Driver, all versions, contains a …7.8
- CVE-2020-5959NVIDIA Virtual GPU Manager, all versions, contains a vulnera…5.5
- CVE-2020-5960NVIDIA Virtual GPU Manager contains a vulnerability in the k…5.5
- CVE-2020-5961NVIDIA vGPU graphics driver for guest OS contains a vulnerab…5.5
- CVE-2020-5962NVIDIA Windows GPU Display Driver, all versions, contains a …7.8
- CVE-2020-5963NVIDIA Windows GPU Display Driver, all versions, contains a …7.8
- CVE-2020-5965NVIDIA Windows GPU Display Driver, all versions, contains a …5.5
- CVE-2020-5966NVIDIA Windows GPU Display Driver, all versions, contains a …7.8
- CVE-2020-5967NVIDIA Linux GPU Display Driver, all versions, contains a vu…4.7
- CVE-2020-5968NVIDIA Virtual GPU Manager contains a vulnerability in the v…7.8
- CVE-2020-5969NVIDIA Virtual GPU Manager contains a vulnerability in the v…6.3
- CVE-2020-5970NVIDIA Virtual GPU Manager contains a vulnerability in the v…7.1
Are you affected by CVE-2020-5964?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST