CVE-2019-5692: Out-of-bounds Read

Published Nov 9, 2019

Updated

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the product uses untrusted input when calculating or using an array index, which may lead to escalation of privileges or denial of service.

Affected Software

2 affected components

Nvidia GPU driver

Microsoft Windows

Remediation

Patch Available

https://nvidia.custhelp.com/app/answers/detail/a_id/4907

Event History

Nov 9, 2019

CVE Published

via MITRE·01:41 AM

Data Sourced

via MITRE·01:41 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-5692?

CVE-2019-5692 is a vulnerability in the NVIDIA Windows GPU Display Driver that can result in escalation of privileges or denial of service.

How does CVE-2019-5692 affect NVIDIA Windows GPU Display Driver?

CVE-2019-5692 affects all versions of the NVIDIA Windows GPU Display Driver.

What is the severity of CVE-2019-5692?

CVE-2019-5692 has a severity score of 7.8 (high).

How can CVE-2019-5692 be exploited?

CVE-2019-5692 can be exploited by using untrusted input to calculate or use an array index in the kernel mode layer handler for DxgkDdiEscape.

Is there a fix for CVE-2019-5692?

Yes, NVIDIA has released a fix for CVE-2019-5692. Please refer to the NVIDIA website for more information.