CVE-2019-5676: High severity nvidia gpu display driver vulnerability
NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), leading to escalation of privileges through code execution.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-5676?
CVE-2019-5676 is a vulnerability in the NVIDIA Windows GPU Display driver software for Windows, which allows for DLL preloading attacks and escalation of privileges.
What is the severity of CVE-2019-5676?
The severity of CVE-2019-5676 is high with a CVSS score of 6.7.
Which software is affected by CVE-2019-5676?
The NVIDIA Windows GPU Display driver software for Windows versions between 410 and 412.36, between 418 and 425.51, and between 430 and 430.64, as well as NVIDIA GeForce Experience up to version 3.19, are affected by CVE-2019-5676.
How does CVE-2019-5676 work?
CVE-2019-5676 works by incorrectly loading Windows system DLLs without validating the path or signature, allowing for DLL preloading attacks.
How can CVE-2019-5676 be fixed?
To fix CVE-2019-5676, users should update their NVIDIA Windows GPU Display driver software and NVIDIA GeForce Experience to the latest versions available.