CVE-2017-0352

HIGH

Nvidia Gpu Driver - Incorrect Permission Assignment

Title source: rule
STIX 2.1

Description

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the GPU firmware where incorrect access control may allow CPU access sensitive GPU control registers, leading to an escalation of privileges

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
http://nvidia.custhelp.com/app/answers/detail/a_id/4462
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/98517

Scores

CVSS v3 7.8
EPSS 0.0004
EPSS Percentile 11.2%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-732
Status published
Products (2)
nvidia/gpu_driver
Nvidia Corporation/GPU Display Driver All versions
Published May 09, 2017
Tracked Since Feb 18, 2026