CVE-2019-5692

HIGH

NVIDIA Windows GPU Display Driver - Privilege Escalation or Denial of Service via DxgkDdiEscape Array Index

Title source: llm
STIX 2.1

Description

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the product uses untrusted input when calculating or using an array index, which may lead to escalation of privileges or denial of service.

References (1)

Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
https://nvidia.custhelp.com/app/answers/detail/a_id/4907

Scores

CVSS v3 7.8
EPSS 0.0004
EPSS Percentile 12.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-129
Status published
Products (1)
nvidia/gpu_driver
Published Nov 09, 2019
Tracked Since Feb 18, 2026