NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation to read from or write to a buffer, but i

The vulnerability in CVE-2019-5670 stems from the DxgkDdiEscape handler within nvlddmkm.sys. An attacker can craft malicious input that causes the driver to read or write beyond the allocated bounds of a buffer. This out-of-bounds access can lead to several severe consequences. Code execution allows the attacker to run arbitrary code within the kernel, potentially gaining complete control of the system. Denial of service (DoS) can be achieved by crashing the driver, rendering the GPU unusable. Privilege escalation allows an attacker to gain elevated privileges on the system. Information disclosure is also possible, potentially exposing sensitive data. The potential blast radius is significant, as a compromised GPU driver can impact the entire operating system.

1. आरक्षित2019-01-07
2. प्रकाशित2019-02-27
3. संशोधित2024-09-16
4. EPSS अद्यतन2026-04-02

The primary mitigation for CVE-2019-5670 is to update to a patched version of the NVIDIA Windows GPU Display Driver. NVIDIA has not released specific fixed versions as of the publication date, so monitoring NVIDIA’s security advisories is crucial. As a temporary workaround, consider implementing strict input validation on any data passed to the DxgkDdiEscape function. WAFs and proxies are unlikely to be effective against this kernel-level vulnerability. After upgrading the driver, confirm the fix by running a memory integrity check and verifying system stability under load.