GPU VulnDB

Database/NVIDIA / GPU stack

NVIDIA Windows GPU Display Driver (nvlddmkm.sys): The escape handler does not validate input buffer size

CVE-2019-5690NVIDIA / GPU stackcurated

Impact

The escape handler does not validate input buffer size. Unprivileged local caller gets a kernel memory-safety bug, rated escalation-capable.

Who can reach it

Any local user with GPU device access.

What to do

Install the fixed Windows GPU Display Driver branch listed in the NVIDIA bulletin. nvlddmkm.sys is a kernel driver: the swap needs a host reboot, so on a Windows GPU node this is a drain-and-reboot, not a live driver reload. No VBIOS or BMC flash involved.

References

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.