CVE-2016-2557: High severity nvidia gpu driver vulnerability
The Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340 before 341.95 and R352 before 354.74 on Windows allows local users to obtain sensitive information from kernel memory, cause a denial of service (crash), or possibly gain privileges via unspecified vectors, which trigger uninitialized or out-of-bounds memory access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2557?
CVE-2016-2557 has a critical severity rating due to its potential to allow local users to exploit kernel memory.
How do I fix CVE-2016-2557?
To fix CVE-2016-2557, upgrade to NVIDIA GPU graphics driver versions R340 341.95 or higher, or R352 354.74 or higher.
Who is affected by CVE-2016-2557?
CVE-2016-2557 affects local users with access to systems running vulnerable versions of NVIDIA GPU drivers.
What type of impact can CVE-2016-2557 have?
CVE-2016-2557 can lead to sensitive information disclosure, denial of service, or privilege escalation.
Are there any mitigations for CVE-2016-2557?
While updating the driver is the primary mitigation for CVE-2016-2557, ensuring proper user access controls can also reduce risk.