NVIDIA GPU Display Driver versions 304 for Windows and Linux contain a kernel mode use-after-free vulnerability. Exploitation could allow an attacker with limited privileges to execute code, cause denial of service, escalate privileges, disclose information, or tamper with data. The vulnerability has a CVSS 3.1 score of 7.8, indicating a medium severity level. Multiple specific Ubuntu package versions of the driver are affected. No patch or remediation information is provided in the input data.
NVIDIA GPU Display Driver for Linux version 304 contains a vulnerability in the kernel mode layer that allows an unprivileged user to bypass an authorization check and modify privileged configuration. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS 3.1 score of 7.8, indicating a medium severity level. Multiple specific driver versions are affected. No patch or remediation details are provided in the input data.
NVIDIA GPU Display Driver versions 304 for Windows and Linux contain a kernel mode vulnerability that allows an unprivileged user to cause an out-of-bounds write. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS score of 7.8, indicating a medium severity level. Multiple specific Ubuntu package versions of the driver are affected. No patch or remediation details are provided in the available data.
NVIDIA GPU Display Driver for Linux version 304 contains a vulnerability in the kernel mode layer where improper verification of cryptographic signatures may allow signature verification to be bypassed under memory pressure. Exploitation could lead to denial of service and data tampering. The vulnerability has a CVSS score of 7.1, indicating a medium severity level. No patch or remediation information is provided in the available data.
NVIDIA GPU Display Driver versions 304 for Windows and Linux contain a vulnerability in the kernel mode layer that allows a user with limited privileges to cause uninitialized kernel memory to be copied to userspace. This vulnerability could lead to information disclosure. The issue affects multiple specific versions of the NVIDIA 304 and 340 driver series on Ubuntu platforms. The CVSS v3.1 base score is 5.5, indicating a medium severity level.
NVIDIA GPU Display Driver versions 304 for Windows and Linux contain a kernel mode vulnerability where an unprivileged user can trigger an integer overflow leading to an out-of-bounds write. Exploitation could result in code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS 3.1 score of 7.8, indicating a medium severity level. Multiple specific Ubuntu package versions of the driver are affected. No vendor advisory or patch information is provided, so patch status is not confirmed.
NVIDIA GPU Display Driver for Linux version 304 contains a vulnerability in the kernel mode layer that allows an unprivileged user to cause a NULL pointer dereference. Exploitation of this flaw can result in a denial of service condition. The vulnerability has a medium severity rating with a CVSS score of 5.5. It affects multiple specific Ubuntu package versions of the NVIDIA 304 and 340 series drivers. No information about available patches or vendor advisories is provided.
NVIDIA GPU Display Driver for Linux version 304 contains a vulnerability in the kernel mode layer allowing an unprivileged user to cause a double-free of imported memory state. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS 3.1 score of 7.8, indicating a medium severity. Multiple specific driver versions are affected. No patch or remediation information is provided in the available data.
NVIDIA GPU Display Driver versions 304 for Windows and Linux contain a kernel mode vulnerability that allows a user to access memory belonging to another user's process. Exploitation could lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure. The vulnerability has a CVSS score of 7.8, indicating a medium severity level. Multiple specific Ubuntu package versions of the driver are affected. No patch or remediation information is provided in the input data.
NVIDIA GPU Display Driver for Linux version 304 contains a kernel mode use-after-free vulnerability exploitable by an unprivileged user. Successful exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS 3.1 score of 7.8, indicating a medium severity level. Multiple specific driver versions are affected. No patch or remediation details are provided in the input data.
NVIDIA GPU Display Driver for Linux versions 304.x and 340.x contain a vulnerability in the kernel mode layer where the size of an ioctl input buffer is not validated. This flaw allows an unprivileged user to trigger an out-of-bounds write in kernel memory, potentially leading to code execution, denial of service, privilege escalation, information disclosure, and data tampering.
NVIDIA GPU Display Driver for Linux versions 304.x and 340.x contain a vulnerability in the kernel mode layer where unsanitized user-supplied version strings can be injected into the kernel log. This vulnerability could allow a local user with limited privileges to cause denial of service or tamper with data by injecting crafted text into the kernel log. The issue has a medium severity rating with a CVSS score of 4.4. No official patch or remediation details are provided in the available data.
NVIDIA GPU Display Driver for Linux version 304 contains a kernel mode vulnerability that allows a user to cause a NULL pointer dereference. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS score of 7.8, indicating a medium severity level. Multiple specific driver versions are affected. No patch or remediation information is provided in the input data.
NVIDIA GPU Display Driver for Linux version 304 contains a kernel mode layer vulnerability where a privileged user can trigger a race condition causing an out-of-bounds write. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS 3.1 score of 6.4, indicating medium severity. Multiple specific Ubuntu package versions of the driver are affected. No patch or remediation details are provided in the input data.
NVIDIA GPU Display Driver for Linux version 304 contains a vulnerability in the kernel mode layer that allows an unprivileged user to cause a memory leak in error paths. This memory leak can lead to kernel memory exhaustion, potentially resulting in a denial of service condition. The vulnerability has a medium severity rating with a CVSS score of 5.5. It affects specific versions of the nvidia-graphics-drivers-304 package on Ubuntu systems. No information about available patches or vendor advisories is provided.
NVIDIA GPU Display Driver for Linux version 304 contains a vulnerability in the kernel mode layer that allows a user to cause uncontrolled resource consumption by exhausting the DRM VMA offset address space. This can lead to a denial of service condition. The vulnerability has a CVSS score of 5.5, indicating medium severity. It affects multiple specific versions of the NVIDIA 304 and 340 series drivers on Ubuntu platforms. No known exploits are reported in the wild, and no patch or remediation information is provided in the available data.
NVIDIA GPU Display Driver for Linux version 304 contains a vulnerability in the kernel mode layer that allows a user to cause uncontrolled kernel log generation by repeatedly invoking an interface that emits unrate-limited error messages. This can lead to a denial of service condition. The vulnerability has a CVSS 3.1 base score of 5.5, indicating medium severity. It affects multiple specific versions of the NVIDIA 304 and 340 series drivers on Ubuntu platforms. No information about available patches or vendor advisories is provided.
NVIDIA GPU Display Driver for Linux version 304 contains a kernel mode vulnerability involving a type confusion via a handle recycle race. Exploitation could allow local users to execute code, cause denial of service, escalate privileges, disclose information, or tamper with data. The vulnerability has a CVSS 3.1 score of 7.8, indicating a medium severity level. Multiple specific driver package versions for Ubuntu 16.04 are affected. No patch or remediation details are provided in the input data.
NVIDIA NVAPI for Windows in certain Nvidia graphics driver versions contains a vulnerability that allows an attacker to cause an out-of-bounds write. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS score of 7.8, indicating a medium severity level. Multiple specific Ubuntu package versions of Nvidia drivers 304 and 340 are affected. There is no information on available patches or vendor advisories in the provided data.
A stack-based buffer overflow vulnerability exists in apcupsd through version 3.14.14 in the getupsvar() function within src/cgi/upsfetch.c. This function is used by CGI scripts such as upsstats.cgi, multimon.cgi, and upsfstats.cgi. The vulnerability is related to CVE-2026-15544 and could allow an attacker to cause a denial of service or potentially execute arbitrary code.