{"id":"CVE-2017-0314","aliases":["EUVD-2017-0670","GHSA-vc2m-758c-w7gm"],"status":"published","title":"All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...","description":"All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual) where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to denial of service or escalation of privileges.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00332,"percentile":0.26641,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2017-02-15T23:00:00Z","modified":"2026-06-17T00:57:29Z","products":[{"vendor":"nvidia","product":"gpu_driver"},{"vendor":"nvidia corporation","product":"windows gpu display driver"}],"references":[{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4398","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0314"},{"url":"https://github.com/advisories/GHSA-vc2m-758c-w7gm"}],"sources":{"cve":[{"id":"CVE-2017-0314","description":"All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual) where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to denial of service or escalation of privileges.","status":"published","published":"2017-02-15T23:00:00Z","modified":"2024-08-05T13:03:56.528Z","updated_at":"2026-11-02T14:33:22.381225Z"}],"euvd":[{"id":"EUVD-2017-0670","description":"All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual) where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to denial of service or escalation of privileges.","status":"published","published":"2017-02-15T23:00:00Z","modified":"2024-08-05T13:03:56Z","updated_at":"2026-11-03T02:39:24.365813Z"}],"ghsa":[{"id":"GHSA-vc2m-758c-w7gm","title":"All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...","description":"All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual) where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to denial of service or escalation of privileges.","status":"published","published":"2022-05-17T02:57:57Z","modified":"2023-01-27T05:06:58Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:43:01.321842Z"}],"nvd":[{"id":"CVE-2017-0314","description":"All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual) where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to denial of service or escalation of privileges.","status":"published","published":"2017-02-15T23:59:00.337Z","modified":"2026-06-17T00:57:29.213Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:43.325192Z"}]}}