Read the docs
TI-2012-00876 Aliases CVE-2012-0952GHSA-xg6p-7989-gjfr

Heap overflow in control device ioctl

Priority LOW 23CWE-119Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A heap buffer overflow was discovered in the device control ioctl in the Linux driver for Nvidia graphics cards, which may allow an attacker to overflow 49 bytes. This issue was fixed in version 295.53.

Why it matters now

EPSS 0.00306 23rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed graphics drivers (nvidia): 295.53

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
NVIDIAgraphics driversbefore 295.53295.53Patch availableCNA
  • graphics drivers VendorNVIDIA Affected before 295.53 Fixed in 295.53 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:nvidia:display_driver:*:*:*:*:*:linux:*:*before 295.53VulnerableNVIDIA
  • cpe:2.3:a:nvidia:display_driver:*:*:*:*:*:linux:*:* Versions before 295.53 Vulnerable ·NVIDIA

Remediation

  • Fix · CNA graphics drivers (nvidia) Fixed in 295.53

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    nvidia graphics drivers 295.53

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2012-00877 Kernel heap contents leak race in ioctl handlerPriority LOW 22
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-0952
  2. 2026-10-03 Alias added: GHSA-xg6p-7989-gjfr

References

Exploit 1

  • TI-2013-00053 The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display… CVSS 2.0HIGH 7.2
  • TI-2012-00875 Out-of-bounds write in NVIDIA graphics drivers CVSS 3.1HIGH 7.8
  • TI-2015-05040 The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304… CVSS 2.0MEDIUM 6.9
  • TI-2012-00877 Kernel heap contents leak race in ioctl handler CVSS 3.1MEDIUM 5.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences