high
7.8
CWE
275
Advisory Published
Updated

CVE-2016-7382

First published: Tue Nov 08 2016(Updated: )

For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges.

Credit: psirt@nvidia.com

Affected SoftwareAffected VersionHow to fix
Nvidia GPU Driver=304.131
Nvidia GPU Driver=340.98
Nvidia GPU Driver=361.93.02
Nvidia GPU Driver=367.44
Nvidia GPU Driver=367.54
Nvidia GPU Driver=370.23
NVIDIA GeForce 910M
NVIDIA GeForce 920M
NVIDIA GeForce 920mx
NVIDIA GeForce 930M
NVIDIA GeForce 930MX
NVIDIA GeForce 940M
NVIDIA GeForce 940MX
NVIDIA GeForce 945M
NVIDIA GeForce GT 710
NVIDIA GeForce GT 730
NVIDIA GeForce GTX 1050
NVIDIA GeForce GTX 1060
NVIDIA GeForce GTX 1070
NVIDIA GeForce GTX 1080
Nvidia GeForce GTX 950M
Nvidia GeForce GTX 960M Firmware
NVIDIA GeForce GTX 965M
NVIDIA NVS 310
NVIDIA NVS 315
NVIDIA
NVIDIA
Nvidia Quadro K1200
NVIDIA Quadro K420
Nvidia Quadro K620
Nvidia Quadro M1000M
NVIDIA Quadro M2000
NVIDIA Quadro M2000M
NVIDIA Quadro M3000M
NVIDIA Quadro M4000
NVIDIA Quadro M4000M
NVIDIA Quadro M5000
NVIDIA Quadro M5000M
NVIDIA Quadro M500M
NVIDIA Quadro M5500
NVIDIA Quadro M6000
NVIDIA Quadro M600M
NVIDIA Quadro P5000
NVIDIA Quadro P6000
NVIDIA Tesla K80
NVIDIA Tesla C2050
NVIDIA Tesla C2070
NVIDIA Tesla C2075
NVIDIA Tesla K10
NVIDIA Tesla K20
NVIDIA Tesla K20X
NVIDIA Tesla K40
NVIDIA Tesla K80
NVIDIA Tesla K80
NVIDIA Tesla M2050
NVIDIA Tesla M2070Q
NVIDIA Tesla M2075
NVIDIA Tesla M2090
NVIDIA Tesla M40
NVIDIA Tesla M6
NVIDIA Tesla M60
Zero One Tech P100s
NVIDIA Tesla P4
NVIDIA Tesla P40
NVIDIA Titan X

Remedy

http://nvidia.custhelp.com/app/answers/detail/a_id/4246

Remedy

http://nvidia.custhelp.com/app/answers/detail/a_id/4247

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2016-7382?

    CVE-2016-7382 is considered a high severity vulnerability due to its potential for arbitrary memory access.

  • How do I fix CVE-2016-7382?

    To address CVE-2016-7382, users should update their NVIDIA GPU Display Driver to the latest version provided by NVIDIA.

  • Which NVIDIA products are affected by CVE-2016-7382?

    CVE-2016-7382 affects various NVIDIA products including Quadro, NVS, GeForce, and Tesla GPUs with specific driver versions.

  • What type of vulnerability is CVE-2016-7382?

    CVE-2016-7382 is a kernel mode vulnerability that involves a missing permissions check.

  • Can CVE-2016-7382 allow for remote exploitation?

    CVE-2016-7382 primarily allows local users to exploit it, rather than remote exploitation.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203