CVE-2017-0324

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Feb 15, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-03257.0An elevation of privilege vulnerability in the NVIDIA I2C HID driver could enable a local malicious application to execute arbitrary code wiCVE-2017-03265.5An information disclosure vulnerability in the NVIDIA Video Driver due to an out-of-bounds read function in the Tegra Display Controller driCVE-2017-03277.0An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code witCVE-2017-03284.7An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of itsCVE-2017-03297.0An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver could enable a local malicious application CVE-2017-03304.7An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of itsCVE-2017-03317.8An elevation of privilege vulnerability in the NVIDIA video driver could enable a local malicious application to execute arbitrary code withCVE-2017-03327.0An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code witCVE-2017-03337.8An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinCVE-2017-03345.5An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its peCVE-2017-03357.8An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinCVE-2017-03365.5An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its pe