CVE-2019-5688

MEDIO 6.7CVE-2019-5688 · Published 18/11/2019 · updated 17/06/2026

In breve

CVE-2019-5688 è una vulnerabilità MEDIO (CVSS 6.7) che riguarda gpumodeswitch (nvidia), nvflash (nvidia), nvuflash (nvidia).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.38%, superiore al 32.3% delle vulnerabilità.
Correzione: aggiornare a 2019-11, 5.588.0 o successiva.

Package	Affected versions	Patched versions
gpumodeswitch nvidia	`< 2019-11`	`2019-11`
nvflash nvidia	`< 5.588.0`	`5.588.0`
nvuflash nvidia	`< 5.588.0`	`5.588.0`

Description

NVIDIA NVFlash, NVUFlash Tool prior to v5.588.0 and GPUModeSwitch Tool prior to 2019-11, NVIDIA kernel mode driver (nvflash.sys, nvflsh32.sys, and nvflsh64.sys) contains a vulnerability in which authenticated users with administrative privileges can gain access to device memory and registers of other devices not managed by NVIDIA, which may lead to escalation of privileges, information disclosure, or denial of service.

References

nvidia.custhelp.com/app/answers/detail/a_id/4928 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free