CVE-2017-0313 EXPLOIT
7.8
HIGH · CVSS 3.0 · EPSS 1.6% (pctl 75)
Patch early
A public exploit exists.
Description
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual) where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to denial of service or escalation of privileges.
Scoring
| CVSS | 7.8 (HIGH, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 1.57% — more likely to be exploited than 75% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2017-02-15 |
| Last modified | 2026-06-17 |
Affected (2)
| Vendor | Product |
|---|---|
| microsoft | windows |
| nvidia | gpu driver |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | NVIDIA Driver 375.70 - Buffer Overflow in Command Buffer Submission | 2017-02-15 |
References
→ the Explorer · watch your stack · NVD