CVE-2016-8818: Input Validation
All versions of NVIDIA Windows GPU Display contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where a pointer passed from a user to the driver is used without validation, leading to denial of service or potential escalation of privileges.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker needs local access to a Windows system and low-level privileges on that system. No user interaction is required.
What is the potential impact?
Successful exploitation can cause a denial of service or potentially allow escalation of privileges, affecting confidentiality, integrity, and availability.
What component should be checked when determining exposure?
Check whether the system uses an NVIDIA Windows GPU Display driver, specifically the kernel-mode driver component nvlddmkm.sys. The issue is described as affecting all versions of the NVIDIA Windows GPU Display driver.
What should be done to remediate the issue?
Apply the available NVIDIA patch for the GPU Display driver.