CVE-2016-8809

HIGH

NVIDIA Windows GPU Display Driver <342.00-375.63 - DoS/Privilege Es...

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-8809. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit targets a bounds check vulnerability in the DxgkDdiEscape handler (0x70001b2) in NVIDIA's GPU driver, leading to an out-of-bounds memory write. The PoC triggers a PAGE_FAULT_IN_NONPAGED_AREA crash due to improper validation of user-controlled input size.

Description

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x70001b2 where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Google Security Research · textdoswindows

https://www.exploit-db.com/exploits/40664

View Code ZIP pw:eip

This exploit targets a bounds check vulnerability in the DxgkDdiEscape handler (0x70001b2) in NVIDIA's GPU driver, leading to an out-of-bounds memory write. The PoC triggers a PAGE_FAULT_IN_NONPAGED_AREA crash due to improper validation of user-controlled input size.

Classification

Working Poc 90%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: NVIDIA GPU driver (version 372.54)

No auth needed

Prerequisites: Windows 10 x64 · NVIDIA GPU driver 372.54 · WDK for D3DKMTEscape

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry exploit x_refsource_exploit-db

https://www.exploit-db.com/exploits/40664/

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/93992

Third Party Advisory x_refsource_confirm

https://support.lenovo.com/us/en/solutions/LEN-10822

Patch, Vendor Advisory x_refsource_confirm

http://nvidia.custhelp.com/app/answers/detail/a_id/4247

Scores

CVSS v3 7.8

EPSS 0.0160

EPSS Percentile 72.7%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-20 CWE-264

Status published

Products (2)

n/a/Quadro, NVS, and GeForce (all versions) Quadro, NVS, and GeForce (all versions)

nvidia/gpu_driver 340 - 342.00

Published Nov 08, 2016

Tracked Since Feb 18, 2026