CVE-2016-7386: Infoleak
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x70000D4 which may lead to leaking of kernel memory contents to user space through an uninitialized buffer.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7386?
CVE-2016-7386 has been rated as a medium severity vulnerability due to its potential impact on user-space access to kernel memory.
How do I fix CVE-2016-7386?
To mitigate CVE-2016-7386, update the NVIDIA Windows GPU Display Driver to version 342.00 or later, or to version 375.63 or later.
What products are affected by CVE-2016-7386?
CVE-2016-7386 affects NVIDIA Quadro, NVS, and GeForce products using specific versions of the NVIDIA GPU driver prior to the mentioned updates.
What type of vulnerability is CVE-2016-7386?
CVE-2016-7386 is a vulnerability in the kernel mode layer of the NVIDIA driver that allows leaking kernel memory contents to user space.
What are the consequences of CVE-2016-7386?
The consequences of CVE-2016-7386 may include unauthorized access to sensitive kernel memory, which could be exploited by attackers.