CVE-2016-8807

    Dashboard / Vulnerabilities / CVE-2016-8807

    CVE-2016-8807

    Published: 8 Nov 2016Last Modified: 10 Mar 2026

    Summary:

    Details: For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x10000e9 where a value is passed from an user to the driver is used without validation as the size input to memcpy() causing a stack buffer overflow, leading to denial of service or potential escalation of privileges.

    References: , http://www.securityfocus.com/bid/94002, https://support.lenovo.com/us/en/solutions/LEN-10822, https://www.exploit-db.com/exploits/40668/, http://nvidia.custhelp.com/app/answers/detail/a_id/4247

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2016-8807 | CVE-DB