Main
Vulnerability Database
Exploits
ID:461 - Exploit for Information disclosure in nVidia products - CVE-2016-7386
ID:461 - Exploit for Information disclosure in nVidia products - CVE-2016-7386
Published: March 18, 2020
Vulnerability identifier: #VU1126
Vulnerability risk: Low
CVE-ID: CVE-2016-7386
CWE-ID: CWE-401
Exploitation vector: Local access
Vulnerable software:
NVS
Quadro
NVIDIA Windows GPU Display Driver
NVS
Quadro
NVIDIA Windows GPU Display Driver
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to gain access to potentially sensitive information.
The weakness exists in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x70000D4, leading to kernel memory leak to user space through an uninitialized buffer.
Successful exploitation of the vulnerability results in disclosure of information.
The weakness exists in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x70000D4, leading to kernel memory leak to user space through an uninitialized buffer.
Successful exploitation of the vulnerability results in disclosure of information.
Remediation
Update Quadro and NVS to 342.00, 375.63.
Update GeForce to 375.63.
Update GeForce to 375.63.