peter bassill · operator
$ cve CVE-2016-8812 JSON

CVE-2016-8812 EXPLOIT

8.8
HIGH · CVSS 3.0 · EPSS 1.6% (pctl 75)

Patch early

A public exploit exists.

Description

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before GFE 3.1.0.52 contains a vulnerability in the kernel mode layer (nvstreamkms.sys) allowing a user to cause a stack buffer overflow with specially crafted executable paths, leading to a denial of service or escalation of privileges.

Scoring

CVSS8.8 (HIGH, v3.0)
VectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS1.61% — more likely to be exploited than 75% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2016-11-08
Last modified2026-06-17

Affected (40)

VendorProduct
nvidiageforce 910m
nvidiageforce 920m
nvidiageforce 920mx
nvidiageforce 930m
nvidiageforce 930mx
nvidiageforce 940m
nvidiageforce 940mx
nvidiageforce 945m
nvidiageforce experience
nvidiageforce gt 710
nvidiageforce gt 730
nvidiageforce gtx 1050
nvidiageforce gtx 1060
nvidiageforce gtx 1070
nvidiageforce gtx 1080
nvidiageforce gtx 950m
nvidiageforce gtx 960m
nvidiageforce gtx 965m
nvidianvs 310
nvidianvs 315
nvidianvs 510
nvidianvs 810
nvidiaquadro k1200
nvidiaquadro k420
nvidiaquadro k620
nvidiaquadro m1000m
nvidiaquadro m2000
nvidiaquadro m2000m
nvidiaquadro m3000m
nvidiaquadro m4000
nvidiaquadro m4000m
nvidiaquadro m5000
nvidiaquadro m5000m
nvidiaquadro m500m
nvidiaquadro m5500
nvidiaquadro m6000
nvidiaquadro m600m
nvidiaquadro p5000
nvidiaquadro p6000
nvidiatitan x

Public exploits

SourceTitleDate
exploit-dbNVIDIA Driver - NvStreamKms 'PsSetCreateProcessNotifyRoutineEx Local Stack Buffer Overflow Callback / Local Privilege Escalation2016-10-31

References

→ the Explorer  ·  watch your stack  ·  NVD