CVE-2015-1170

HIGH 7.2CVE-2015-1170 · Published 06/03/2015 · updated 17/06/2026

In short

CVE-2015-1170 is a HIGH (CVSS 7.2) vulnerability affecting gpu driver r304 (nvidia), gpu driver r340 (nvidia), gpu driver r343 (nvidia).
Chance of exploitation in the next 30 days (EPSS): 0.39%, higher than 33.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gpu driver r304 nvidia	`≤ 309.07`	No fix yet
gpu driver r340 nvidia	`≤ 341.43`	No fix yet
gpu driver r343 nvidia	`≤ 345.19`	No fix yet
gpu driver r346 nvidia	`≤ 347.51`	No fix yet

Description

The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a "kernel administrator check," which allows local users to gain administrator privileges via unspecified API calls.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free