CVE-2019-5691: Null Pointer Dereference

Published Nov 9, 2019

Updated

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which a NULL pointer is dereferenced, which may lead to denial of service or escalation of privileges.

Affected Software

2 affected components

Nvidia GPU driver

Microsoft Windows

Remediation

Patch Available

https://nvidia.custhelp.com/app/answers/detail/a_id/4907

Event History

Nov 9, 2019

CVE Published

via MITRE·01:40 AM

Data Sourced

via MITRE·01:40 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-5691?

CVE-2019-5691 is a vulnerability found in NVIDIA Windows GPU Display Driver that allows for denial of service or escalation of privileges.

What is the severity of CVE-2019-5691?

The severity of CVE-2019-5691 is high with a score of 7.8.

Which software is affected by CVE-2019-5691?

NVIDIA Windows GPU Display Driver (all versions) is affected by CVE-2019-5691.

How can CVE-2019-5691 be exploited?

CVE-2019-5691 can be exploited by dereferencing a NULL pointer in the kernel mode layer of NVIDIA Windows GPU Display Driver.

Is Microsoft Windows affected by CVE-2019-5691?

No, Microsoft Windows is not affected by CVE-2019-5691.

How can I fix CVE-2019-5691?

To fix CVE-2019-5691, update the NVIDIA Windows GPU Display Driver to the latest version available.

Where can I find more information about CVE-2019-5691?

You can find more information about CVE-2019-5691 at the following link: [https://nvidia.custhelp.com/app/answers/detail/a_id/4907](https://nvidia.custhelp.com/app/answers/detail/a_id/4907)