CVEvulnerability
CVE-2019-5695
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-11-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-427
Description
NVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions) contains a vulnerability in the local service provider component in which an attacker with local system and privileged access can incorrectly load Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), which may lead to denial of service or information disclosure through code execution.
Affected configurations
• nvidia geforce experience (< 3.20.1)
• nvidia gpu driver
Related
Weakness · CWE (1)
- CWE-427 Uncontrolled Search Path Element weakness
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/4860 Patch, Vendor Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/4907 Patch, Vendor Advisory
- https://safebreach.com/Post/NVIDIA-GPU-Display-Drivers-for-Windows-and-GFE-Software-DLL-Preloading-and-Potential-Abuses-CVE-2019-5694-CVE-2019-5695 Exploit, Third Party Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/4860 Patch, Vendor Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/4907 Patch, Vendor Advisory
- https://safebreach.com/Post/NVIDIA-GPU-Display-Drivers-for-Windows-and-GFE-Software-DLL-Preloading-and-Potential-Abuses-CVE-2019-5694-CVE-2019-5695 Exploit, Third Party Advisory