CVE-2017-0316

HIGH

GeForce Experience 3.x < 3.10.0.55 - Denial of Service or Privilege Escalation via Unvalidated User Input

Title source: llm

Description

In GeForce Experience (GFE) 3.x before 3.10.0.55, NVIDIA Installer Framework contains a vulnerability in NVISystemService64 where a value passed from a user to the driver is used without validation, which may lead to denial of service or possible escalation of privileges.

References (1)

Core 1

Core References

Issue Tracking, Vendor Advisory x_refsource_confirm

http://nvidia.custhelp.com/app/answers/detail/a_id/4560

Scores

CVSS v3 7.8

EPSS 0.0004

EPSS Percentile 14.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-20

Status published

Products (2)

nvidia/geforce_experience 3.0 - 3.10.0.55

Nvidia Corporation/GeForce Experience 3.x

Published Oct 16, 2017

Tracked Since Feb 18, 2026