CVEvulnerability
CVE-2020-5964
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-06-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-345
Description
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure.
Affected configurations
• nvidia quadro firmware (>= 390 < 392.61)
• nvidia quadro firmware (>= 418 < 426.78)
• nvidia quadro firmware (>= 440 < 443.18)
• nvidia quadro firmware (>= 450 < 451.48)
• nvidia tesla firmware (>= 418 < 426.78)
• nvidia tesla firmware (>= 440 < 443.18)
• nvidia tesla firmware (>= 450 < 451.48)
• nvidia geforce experience (< 3.20.4)
• nvidia nvs firmware (>= 390 < 392.61)
• nvidia nvs firmware (>= 418 < 426.78)
• nvidia nvs firmware (>= 440 < 443.18)
• nvidia nvs firmware (>= 450 < 451.48)
• nvidia geforce firmware (>= 450 < 451.48)
Related
Weakness · CWE (1)
- CWE-345 Insufficient Verification of Data Authenticity weakness
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5031 Vendor Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5038 Vendor Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5031 Vendor Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5038 Vendor Advisory