First published: Tue Apr 12 2016(Updated: )
The Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340 before 341.95 and R352 before 354.74 on Windows allows local users to obtain sensitive information, cause a denial of service (crash), or gain privileges via unspecified vectors related to an untrusted pointer, which trigger uninitialized or out-of-bounds memory access.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows | ||
Nvidia Gpu Driver R340 | =431.61 | |
Nvidia Gpu Driver R352 | =353.82 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-2558 is considered a high severity vulnerability due to its potential to cause denial of service and privilege escalation.
To fix CVE-2016-2558, update the NVIDIA GPU graphics driver to version 341.95 or later for R340 and version 354.74 or later for R352.
CVE-2016-2558 affects local users on systems running vulnerable versions of the NVIDIA GPU graphics driver on Microsoft Windows.
CVE-2016-2558 can lead to attacks that result in information disclosure, denial of service, or privilege escalation.
Currently, the most effective mitigation for CVE-2016-2558 is to keep your NVIDIA graphics drivers updated to a non-vulnerable version.