CVE-2017-6277

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to denial of service or possible escalation of privileges.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
Nvidia Corporation	GPU Display Driver	All

References

http://nvidia.custhelp.com/app/answers/detail/a_id/4544Vendor Advisory
http://www.securityfocus.com/bid/101004Third Party Advisory, VDB Entry
http://nvidia.custhelp.com/app/answers/detail/a_id/4544Vendor Advisory
http://www.securityfocus.com/bid/101004Third Party Advisory, VDB Entry

Timeline

Published: Sep 22, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-62787.8NVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or write a buffer using an CVE-2017-62797.8NVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in media server which may cause an out of bounds w CVE-2017-62807.5NVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead to information disclosure. This issue is rat CVE-2017-62817.8NVIDIA libnvomx contains a possible out of bounds write due to a improper input validation which could lead to local escalation of privilege CVE-2017-62827.8NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary value to an arbitrary l CVE-2017-62835.5NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip rese CVE-2017-62845.5NVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG) where the DRBG does not properly initialize CVE-2017-62855.5NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This i CVE-2017-62867.8NVIDIA libnvomx contains a possible out of bounds write due to a missing bounds check which could lead to local escalation of privilege. Thi CVE-2017-62875.5NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This i CVE-2017-62885.5NVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could lead to local information disclosure. This i CVE-2017-62897.8In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment (TEE) contains a memory corruption (due to unusu