CVE-2016-5025 : For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVAPI support layer causes

Products affected by CVE-2016-5025

Nvidia » Gpu Driver
Versions from including (>=) 361 and before (<) 362.77
cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*
Matching versions
When used together with: Nvidia » Geforce 910m » Version: N/A
When used together with: Nvidia » Geforce 920m » Version: N/A
When used together with: Nvidia » Geforce 920mx » Version: N/A
When used together with: Nvidia » Geforce 930m » Version: N/A
When used together with: Nvidia » Geforce 930mx » Version: N/A
When used together with: Nvidia » Geforce 940m » Version: N/A
When used together with: Nvidia » Geforce 940mx » Version: N/A
When used together with: Nvidia » Geforce 945m » Version: N/A
When used together with: Nvidia » Geforce Gt 710 » Version: N/A
When used together with: Nvidia » Geforce Gt 730 » Version: N/A
When used together with: Nvidia » Geforce Gtx 1050 » Version: N/A
When used together with: Nvidia » Geforce Gtx 1060 » Version: N/A
When used together with: Nvidia » Geforce Gtx 1070 » Version: N/A
When used together with: Nvidia » Geforce Gtx 1080 » Version: N/A
When used together with: Nvidia » Geforce Gtx 950m » Version: N/A
When used together with: Nvidia » Geforce Gtx 960m » Version: N/A
When used together with: Nvidia » Geforce Gtx 965m » Version: N/A
When used together with: Nvidia » Nvs 310 » Version: N/A
When used together with: Nvidia » Nvs 315 » Version: N/A
When used together with: Nvidia » Nvs 510 » Version: N/A
When used together with: Nvidia » Nvs 810 » Version: N/A
When used together with: Nvidia » Quadro K1200 » Version: N/A
When used together with: Nvidia » Quadro K420 » Version: N/A
When used together with: Nvidia » Quadro K620 » Version: N/A
When used together with: Nvidia » Quadro M1000m » Version: N/A
When used together with: Nvidia » Quadro M2000 » Version: N/A
When used together with: Nvidia » Quadro M2000m » Version: N/A
When used together with: Nvidia » Quadro M3000m » Version: N/A
When used together with: Nvidia » Quadro M4000 » Version: N/A
When used together with: Nvidia » Quadro M4000m » Version: N/A
When used together with: Nvidia » Quadro M5000 » Version: N/A
When used together with: Nvidia » Quadro M5000m » Version: N/A
When used together with: Nvidia » Quadro M500m » Version: N/A
When used together with: Nvidia » Quadro M5500 » Version: N/A
When used together with: Nvidia » Quadro M6000 » Version: N/A
When used together with: Nvidia » Quadro M600m » Version: N/A
When used together with: Nvidia » Quadro P5000 » Version: N/A
When used together with: Nvidia » Quadro P6000 » Version: N/A
When used together with: Nvidia » Titan X » Version: N/A
Nvidia » Gpu Driver
Versions from including (>=) 340 and before (<) 341.96
cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*
Matching versions
When used together with: Nvidia » Geforce 910m » Version: N/A
When used together with: Nvidia » Geforce 920m » Version: N/A
When used together with: Nvidia » Geforce 920mx » Version: N/A
When used together with: Nvidia » Geforce 930m » Version: N/A
When used together with: Nvidia » Geforce 930mx » Version: N/A
When used together with: Nvidia » Geforce 940m » Version: N/A
When used together with: Nvidia » Geforce 940mx » Version: N/A
When used together with: Nvidia » Geforce 945m » Version: N/A
When used together with: Nvidia » Geforce Gt 710 » Version: N/A
When used together with: Nvidia » Geforce Gt 730 » Version: N/A
When used together with: Nvidia » Geforce Gtx 1050 » Version: N/A
When used together with: Nvidia » Geforce Gtx 1060 » Version: N/A
When used together with: Nvidia » Geforce Gtx 1070 » Version: N/A
When used together with: Nvidia » Geforce Gtx 1080 » Version: N/A
When used together with: Nvidia » Geforce Gtx 950m » Version: N/A
When used together with: Nvidia » Geforce Gtx 960m » Version: N/A
When used together with: Nvidia » Geforce Gtx 965m » Version: N/A
When used together with: Nvidia » Nvs 310 » Version: N/A
When used together with: Nvidia » Nvs 315 » Version: N/A
When used together with: Nvidia » Nvs 510 » Version: N/A
When used together with: Nvidia » Nvs 810 » Version: N/A
When used together with: Nvidia » Quadro K1200 » Version: N/A
When used together with: Nvidia » Quadro K420 » Version: N/A
When used together with: Nvidia » Quadro K620 » Version: N/A
When used together with: Nvidia » Quadro M1000m » Version: N/A
When used together with: Nvidia » Quadro M2000 » Version: N/A
When used together with: Nvidia » Quadro M2000m » Version: N/A
When used together with: Nvidia » Quadro M3000m » Version: N/A
When used together with: Nvidia » Quadro M4000 » Version: N/A
When used together with: Nvidia » Quadro M4000m » Version: N/A
When used together with: Nvidia » Quadro M5000 » Version: N/A
When used together with: Nvidia » Quadro M5000m » Version: N/A
When used together with: Nvidia » Quadro M500m » Version: N/A
When used together with: Nvidia » Quadro M5500 » Version: N/A
When used together with: Nvidia » Quadro M6000 » Version: N/A
When used together with: Nvidia » Quadro M600m » Version: N/A
When used together with: Nvidia » Quadro P5000 » Version: N/A
When used together with: Nvidia » Quadro P6000 » Version: N/A
When used together with: Nvidia » Titan X » Version: N/A
Nvidia » Gpu Driver
Versions from including (>=) 367 and before (<) 368.39
cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*
Matching versions
When used together with: Nvidia » Geforce 910m » Version: N/A
When used together with: Nvidia » Geforce 920m » Version: N/A
When used together with: Nvidia » Geforce 920mx » Version: N/A
When used together with: Nvidia » Geforce 930m » Version: N/A
When used together with: Nvidia » Geforce 930mx » Version: N/A
When used together with: Nvidia » Geforce 940m » Version: N/A
When used together with: Nvidia » Geforce 940mx » Version: N/A
When used together with: Nvidia » Geforce 945m » Version: N/A
When used together with: Nvidia » Geforce Gt 710 » Version: N/A
When used together with: Nvidia » Geforce Gt 730 » Version: N/A
When used together with: Nvidia » Geforce Gtx 1050 » Version: N/A
When used together with: Nvidia » Geforce Gtx 1060 » Version: N/A
When used together with: Nvidia » Geforce Gtx 1070 » Version: N/A
When used together with: Nvidia » Geforce Gtx 1080 » Version: N/A
When used together with: Nvidia » Geforce Gtx 950m » Version: N/A
When used together with: Nvidia » Geforce Gtx 960m » Version: N/A
When used together with: Nvidia » Geforce Gtx 965m » Version: N/A
When used together with: Nvidia » Nvs 310 » Version: N/A
When used together with: Nvidia » Nvs 315 » Version: N/A
When used together with: Nvidia » Nvs 510 » Version: N/A
When used together with: Nvidia » Nvs 810 » Version: N/A
When used together with: Nvidia » Quadro K1200 » Version: N/A
When used together with: Nvidia » Quadro K420 » Version: N/A
When used together with: Nvidia » Quadro K620 » Version: N/A
When used together with: Nvidia » Quadro M1000m » Version: N/A
When used together with: Nvidia » Quadro M2000 » Version: N/A
When used together with: Nvidia » Quadro M2000m » Version: N/A
When used together with: Nvidia » Quadro M3000m » Version: N/A
When used together with: Nvidia » Quadro M4000 » Version: N/A
When used together with: Nvidia » Quadro M4000m » Version: N/A
When used together with: Nvidia » Quadro M5000 » Version: N/A
When used together with: Nvidia » Quadro M5000m » Version: N/A
When used together with: Nvidia » Quadro M500m » Version: N/A
When used together with: Nvidia » Quadro M5500 » Version: N/A
When used together with: Nvidia » Quadro M6000 » Version: N/A
When used together with: Nvidia » Quadro M600m » Version: N/A
When used together with: Nvidia » Quadro P5000 » Version: N/A
When used together with: Nvidia » Quadro P6000 » Version: N/A
When used together with: Nvidia » Titan X » Version: N/A
Nvidia » Gpu Driver
Versions from including (>=) 352.0 and before (<) 354.99
cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*
Matching versions
When used together with: Nvidia » Geforce 910m » Version: N/A
When used together with: Nvidia » Geforce 920m » Version: N/A
When used together with: Nvidia » Geforce 920mx » Version: N/A
When used together with: Nvidia » Geforce 930m » Version: N/A
When used together with: Nvidia » Geforce 930mx » Version: N/A
When used together with: Nvidia » Geforce 940m » Version: N/A
When used together with: Nvidia » Geforce 940mx » Version: N/A
When used together with: Nvidia » Geforce 945m » Version: N/A
When used together with: Nvidia » Geforce Gt 710 » Version: N/A
When used together with: Nvidia » Geforce Gt 730 » Version: N/A
When used together with: Nvidia » Geforce Gtx 1050 » Version: N/A
When used together with: Nvidia » Geforce Gtx 1060 » Version: N/A
When used together with: Nvidia » Geforce Gtx 1070 » Version: N/A
When used together with: Nvidia » Geforce Gtx 1080 » Version: N/A
When used together with: Nvidia » Geforce Gtx 950m » Version: N/A
When used together with: Nvidia » Geforce Gtx 960m » Version: N/A
When used together with: Nvidia » Geforce Gtx 965m » Version: N/A
When used together with: Nvidia » Nvs 310 » Version: N/A
When used together with: Nvidia » Nvs 315 » Version: N/A
When used together with: Nvidia » Nvs 510 » Version: N/A
When used together with: Nvidia » Nvs 810 » Version: N/A
When used together with: Nvidia » Quadro K1200 » Version: N/A
When used together with: Nvidia » Quadro K420 » Version: N/A
When used together with: Nvidia » Quadro K620 » Version: N/A
When used together with: Nvidia » Quadro M1000m » Version: N/A
When used together with: Nvidia » Quadro M2000 » Version: N/A
When used together with: Nvidia » Quadro M2000m » Version: N/A
When used together with: Nvidia » Quadro M3000m » Version: N/A
When used together with: Nvidia » Quadro M4000 » Version: N/A
When used together with: Nvidia » Quadro M4000m » Version: N/A
When used together with: Nvidia » Quadro M5000 » Version: N/A
When used together with: Nvidia » Quadro M5000m » Version: N/A
When used together with: Nvidia » Quadro M500m » Version: N/A
When used together with: Nvidia » Quadro M5500 » Version: N/A
When used together with: Nvidia » Quadro M6000 » Version: N/A
When used together with: Nvidia » Quadro M600m » Version: N/A
When used together with: Nvidia » Quadro P5000 » Version: N/A
When used together with: Nvidia » Quadro P6000 » Version: N/A
When used together with: Nvidia » Titan X » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2016-5025

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 19 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-5025

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.1	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:C	3.9	8.5	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Complete
6.6	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H	1.8	4.7	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: Low Availability: High

CWE ids for CVE-2016-5025

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2016-5025

http://www.securityfocus.com/bid/93251

Multiple NVIDIA Products Local Privilege Escalation and Denial of Service Vulnerabilities
Third Party Advisory;VDB Entry

CVEs referencing this url
https://support.lenovo.com/us/en/product_security/ps500070

Denial of Service Vulnerabilities in NVidia® Drivers that affect Quadro, NVS and GeForce Windows-based Systems - US
Third Party Advisory

CVEs referencing this url
http://nvidia.custhelp.com/app/answers/detail/a_id/4213

Security Bulletin: Multiple vulnerabilities affect Quadro, NVS, and GeForce Windows based systems | NVIDIA
Patch;Vendor Advisory

CVEs referencing this url

Vulnerability Details : CVE-2016-5025

Products affected by CVE-2016-5025

Exploit prediction scoring system (EPSS) score for CVE-2016-5025

CVSS scores for CVE-2016-5025

CWE ids for CVE-2016-5025

References for CVE-2016-5025