CVE-2019-5684

CRITICAL

NVIDIA Windows GPU Display Driver - Out-of-bounds Write via DirectX Shader

Title source: llm

Description

NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause an out of bounds access of an input texture array, which may lead to denial of service or code execution.

References (4)

Core 4

Core References

Vendor Advisory x_refsource_confirm

https://nvidia.custhelp.com/app/answers/detail/a_id/4841

Patch, Third Party Advisory x_refsource_confirm

http://www.vmware.com/security/advisories/VMSA-2019-0012.html

Exploit, Third Party Advisory x_refsource_misc

https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0779

Third Party Advisory x_refsource_confirm

https://support.lenovo.com/us/en/product_security/LEN-28096

Scores

CVSS v3 10.0

EPSS 0.0244

EPSS Percentile 85.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (1)

nvidia/gpu_driver

Published Aug 06, 2019

Tracked Since Feb 18, 2026