CVE-2016-8811

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x7000170 where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	Quadro, NVS, and GeForce (all versions)	Quadro, NVS, and GeForce (all versions)

References

http://nvidia.custhelp.com/app/answers/detail/a_id/4247Patch, Vendor Advisory
http://www.securityfocus.com/bid/93988Third Party Advisory, VDB Entry
https://support.lenovo.com/us/en/solutions/LEN-10822Third Party Advisory
https://www.exploit-db.com/exploits/40662/Third Party Advisory, VDB Entry
http://nvidia.custhelp.com/app/answers/detail/a_id/4247Patch, Vendor Advisory
http://www.securityfocus.com/bid/93988Third Party Advisory, VDB Entry
https://support.lenovo.com/us/en/solutions/LEN-10822Third Party Advisory
https://www.exploit-db.com/exploits/40662/Third Party Advisory, VDB Entry

Timeline

Published: Nov 8, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016