Platform
nvidia
Component
nvidia-gpu-graphics-driver
CVE-2019-5669 is a security vulnerability affecting the NVIDIA Windows GPU Display Driver. It resides within the kernel-mode layer (nvlddmkm.sys) specifically in the DxgkDdiEscape handler. This flaw allows an attacker to potentially trigger a denial of service or escalate privileges by exploiting an out-of-bounds memory access. All versions of the NVIDIA Windows GPU Display Driver are affected, and a fix is pending.
The vulnerability in CVE-2019-5669 stems from the DxgkDdiEscape handler within nvlddmkm.sys. An attacker can craft malicious input that causes the driver to read or write beyond the allocated bounds of a buffer. This out-of-bounds access can lead to a denial of service (DoS) condition, where the GPU driver crashes, rendering the GPU unusable. Privilege escalation is also possible, allowing an attacker to gain elevated privileges on the system. The impact is significant, as a compromised GPU driver can disrupt system operations and potentially allow for further exploitation.
CVE-2019-5669 was published on February 27, 2019. The vulnerability's severity is pending evaluation. No public exploits or proof-of-concept code have been publicly disclosed as of this writing. It is not currently listed on KEV or EPSS. Active campaigns exploiting this vulnerability are not known, but the potential for privilege escalation and DoS warrants careful monitoring.
Exploit Status
EPSS
0.04% (13% percentile)
The primary mitigation for CVE-2019-5669 is to update to a patched version of the NVIDIA Windows GPU Display Driver. NVIDIA has not released specific fixed versions as of the publication date, so monitoring NVIDIA’s security advisories is crucial. As a temporary workaround, consider implementing strict input validation on any data passed to the DxgkDdiEscape function. WAFs and proxies are unlikely to be effective against this kernel-level vulnerability. After upgrading the driver, confirm the fix by running a memory integrity check and verifying system stability under load.
Actualice el controlador de gráficos NVIDIA a la última versión disponible desde el sitio web oficial de NVIDIA o a través del software NVIDIA GeForce Experience. Esto solucionará la vulnerabilidad al corregir el manejo de la memoria en el controlador del kernel.
Vulnerability analysis and critical alerts directly to your inbox.
It's a vulnerability in the NVIDIA Windows GPU Display Driver that can lead to denial of service or privilege escalation due to out-of-bounds memory access.
If you are using any version of the NVIDIA Windows GPU Display Driver, you are potentially affected. Check NVIDIA's website for updated drivers.
Update to the latest patched version of the NVIDIA Windows GPU Display Driver. Monitor NVIDIA's security advisories for release information.
No active campaigns exploiting this vulnerability are currently known, but it's important to apply the patch as soon as possible.
Refer to the NVIDIA security advisory and the National Vulnerability Database (NVD) entry for CVE-2019-5669 for more details.
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.