CVE-2016-8814: Null Pointer Dereference

Published Dec 16, 2016

Updated

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where multiple pointers are used without checking for NULL, leading to denial of service or potential escalation of privileges.

Affected Software

2 affected components

Nvidia GPU driver

Microsoft Windows

Remediation

Patch Available

http://nvidia.custhelp.com/app/answers/detail/a_id/4257

Event History

Dec 16, 2016

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-8814?

CVE-2016-8814 has a high severity rating of 7.8 according to the CVSS score.

How do I fix CVE-2016-8814?

To fix CVE-2016-8814, you need to apply the patch provided by NVIDIA for the affected GPU display driver.

What impact does CVE-2016-8814 have on systems?

CVE-2016-8814 can lead to denial of service or potential escalation of privileges if exploited.

What is the nature of the vulnerability in CVE-2016-8814?

CVE-2016-8814 is a Null Pointer Dereference vulnerability found in the kernel mode layer of the NVIDIA Windows GPU Display Driver.

Are all versions of the NVIDIA GPU driver affected by CVE-2016-8814?

Yes, all versions of the NVIDIA Windows GPU Display Driver are affected by CVE-2016-8814.