Platform
nvidia
Component
nvidia-gpu-graphics-driver
CVE-2019-5665 is a security vulnerability affecting NVIDIA GPU Graphics Drivers. The vulnerability resides within the 3D vision component and stems from a failure to properly validate file paths when opening files. This could lead to code execution, denial of service, or privilege escalation. Affected versions include all NVIDIA GPU Graphics Drivers.
The potential impact of CVE-2019-5665 is significant, encompassing code execution, denial of service (DoS), and privilege escalation. An attacker could exploit this vulnerability to execute arbitrary code on the system, potentially gaining complete control. The DoS impact could result in system crashes or instability. Privilege escalation could allow an attacker to gain elevated privileges, bypassing security controls and accessing sensitive data. The lack of input validation when handling file paths makes the vulnerability particularly concerning.
CVE-2019-5665 was published on February 27, 2019. The CVSS severity score is pending evaluation. Public proof-of-concept (POC) code may exist, but its availability and ease of use are currently unknown. Monitor NVIDIA's security advisories and industry threat intelligence feeds for updates on exploitation activity.
Exploit Status
EPSS
0.06% (19% percentile)
The primary mitigation for CVE-2019-5665 is to update to the latest available version of the NVIDIA GPU Graphics Driver. NVIDIA typically releases security updates to address these types of vulnerabilities. Until an update is available, consider disabling the 3D vision component if it is not essential. Implement strict file access controls to limit the ability of unauthorized processes to access sensitive files. Monitor system logs for any suspicious activity related to the NVIDIA GPU driver.
Actualice el controlador de la GPU NVIDIA a la última versión disponible desde el sitio web oficial de NVIDIA o a través del software NVIDIA GeForce Experience. Esto solucionará la vulnerabilidad en el componente 3D vision.
Vulnerability analysis and critical alerts directly to your inbox.
It's a vulnerability in NVIDIA GPU Graphics Drivers allowing code execution, DoS, or privilege escalation.
All versions of NVIDIA GPU Graphics Drivers are potentially affected.
Update to the latest NVIDIA GPU Graphics Driver.
Exploitation activity is currently unknown, but the potential exists.
Refer to NVIDIA's security advisories and the CVE entry for more details: https://cve.mitre.org/cgi-bin/cve/search?keyword=CVE-2019-5665
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.