CVE-2016-7387

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x600000D where a value passed from a user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	Quadro, NVS, and GeForce (all versions)	Quadro, NVS, and GeForce (all versions)

References

http://nvidia.custhelp.com/app/answers/detail/a_id/4247Patch, Vendor Advisory
http://www.securityfocus.com/bid/93985Third Party Advisory, VDB Entry
https://support.lenovo.com/us/en/solutions/LEN-10822Third Party Advisory
https://www.exploit-db.com/exploits/40659/Exploit, Third Party Advisory, VDB Entry
http://nvidia.custhelp.com/app/answers/detail/a_id/4247Patch, Vendor Advisory
http://www.securityfocus.com/bid/93985Third Party Advisory, VDB Entry
https://support.lenovo.com/us/en/solutions/LEN-10822Third Party Advisory
https://www.exploit-db.com/exploits/40659/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Nov 8, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-73887.8For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vul CVE-2016-73897.8For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver on Linux R304 before 304.132, R340 before 340.98, R367 be CVE-2016-73907.8For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vul CVE-2016-73917.8For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vul CVE-2016-73925.5Heap-based buffer overflow in the pstoedit_suffix_table_init function in output-pstoedit.c in AutoTrace 0.31.1 allows remote attackers to ca CVE-2016-73935.5Stack-based buffer overflow in the aac_sync function in aac_parser.c in Libav before 11.5 allows remote attackers to cause a denial of servi CVE-2016-73946.1tiki wiki cms groupware <=15.2 has a xss vulnerability, allow attackers steal user's cookie.CVE-2016-73958.8SkPath.cpp in Skia, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, does not properly val CVE-2016-73974.4The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information CVE-2016-73989.8A type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl-http extension 3.1.0beta2 (PHP 7) and earlie CVE-2016-73999.8scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow rem CVE-2016-74009.8Multiple SQL injection vulnerabilities in Exponent CMS before 2.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id