TI-2016-06291 Aliases CVE-2016-7388 GHSA-c2qf-w27f-867j

Access control flaw in Quadro, NVS, and GeForce

LOW 34CWE-264Published 2016-11-08 · Updated 2024-08-06

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges.

Why it matters now

EPSS 0.00409 35th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	Quadro, NVS, and GeForce (all versions)	Quadro, NVS, and GeForce (all versions)	—	No fix listed	CNA

Quadro, NVS, and GeForce (all versions) Vendor— Affected Quadro, NVS, and GeForce (all versions) Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:nvidia:gpu_driver::::::::	340 to before 342.00; 375 to before 375.63	Vulnerable	NVIDIA
cpe:2.3:o:microsoft:windows::::::::	all versions	Running on	Microsoft

cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:* Versions 340 to before 342.00; 375 to before 375.63 Vulnerable ·NVIDIA
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Versions all versions Running on ·Microsoft

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2016-7388
2026-10-03 Alias added: GHSA-c2qf-w27f-867j

References

Patch 1

http://nvidia.custhelp.com/app/answers/detail/a_id/4247

Advisory 1

https://support.lenovo.com/us/en/solutions/LEN-10822

TI-2019-04030 Out-of-bounds write in NVIDIA GPU Display Driver CVSS 3.0CRITICAL 10.0
TI-2019-04031 Out-of-bounds write in NVIDIA GPU Display Driver CVSS 3.0CRITICAL 9.8
TI-2015-04237 The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346.87… CVSS 2.0HIGH 10.0
TI-2013-05100 Unspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 310, and 304… CVSS 2.0HIGH 10.0
TI-2015-06538 nvSCPAPISvr.exe in the Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver… CVSS 2.0HIGH 7.7
TI-2013-00068 Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x… CVSS 2.0HIGH 7.1

See all 126 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences