Improper input validation in Quadro, NVS, GeForce
Priority LOW 29CWE-20Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Low · Low · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVAPI support layer causes a denial of service vulnerability (blue screen crash) within the NVIDIA Windows graphics drivers.
Why it matters now
EPSS 0.00386 32nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Quadro, NVS, GeForce (all versions) | Quadro, NVS, GeForce (all versions) | — | No fix listed | CNA |
- Quadro, NVS, GeForce (all versions) Vendor— Affected Quadro, NVS, GeForce (all versions) Fixed in — No fix listed CNA
CPE configurations NVD · 40
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:* | 340 to before 341.96; 352.0 to before 354.99; 361 to before 362.77; 367 to before 368.39 | Vulnerable | NVIDIA |
| cpe:2.3:h:nvidia:geforce_910m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_920m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_920mx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_930m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_930mx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_940m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_940mx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_945m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_gt_710:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
- cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:* Versions 340 to before 341.96; 352.0 to before 354.99; 361 to before 362.77; 367 to before 368.39 Vulnerable ·NVIDIA
- cpe:2.3:h:nvidia:geforce_910m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_920m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_920mx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_930m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_930mx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_940m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_940mx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_945m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_gt_710:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
Show 30 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:nvidia:geforce_gt_730:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_gtx_1050:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_gtx_1060:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_gtx_1070:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_gtx_1080:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_gtx_950m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_gtx_960m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:geforce_gtx_965m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:nvs_310:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:nvs_315:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:nvs_510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:nvs_810:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_k1200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_k420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_k620:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m1000m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m2000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m2000m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m3000m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m4000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m4000m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m5000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m5000m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m500m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m5500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m6000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_m600m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_p5000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:quadro_p6000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
| cpe:2.3:h:nvidia:titan_x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NVIDIA |
- cpe:2.3:h:nvidia:geforce_gt_730:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_gtx_1050:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_gtx_1060:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_gtx_1070:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_gtx_1080:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_gtx_950m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_gtx_960m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:geforce_gtx_965m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:nvs_310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:nvs_315:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:nvs_510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:nvs_810:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_k1200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_k420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_k620:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m1000m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m2000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m2000m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m3000m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m4000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m4000m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m5000m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m500m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m5500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m6000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_m600m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_p5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:quadro_p6000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
- cpe:2.3:h:nvidia:titan_x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2016-5025
- 2026-10-03 Alias added: GHSA-v6pv-cmg8-x43p
References
More NVIDIA Gpu Driver vulnerabilities
- TI-2019-04030 Out-of-bounds write in NVIDIA GPU Display Driver CVSS 3.0CRITICAL 10.0
- TI-2019-04031 Out-of-bounds write in NVIDIA GPU Display Driver CVSS 3.0CRITICAL 9.8
- TI-2015-04237 The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346.87… CVSS 2.0HIGH 10.0
- TI-2013-05100 Unspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 310, and 304… CVSS 2.0HIGH 10.0
- TI-2015-06538 nvSCPAPISvr.exe in the Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver… CVSS 2.0HIGH 7.7
- TI-2013-00068 Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x… CVSS 2.0HIGH 7.1
Sources
- CVE-2016-5025 · CVE Program
- CVE-2016-5025 · NVD
- FIRST EPSS
- GHSA-v6pv-cmg8-x43p · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences