CVE-2012-4225

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-11-19 · updated 2026-06-16
Weakness: CWE-264

Description

NVIDIA UNIX graphics driver before 295.71 and before 304.32 allows local users to write to arbitrary physical memory locations and gain privileges by modifying the VGA window using /dev/nvidia0.

Affected products

NVIDIA Unix Graphic Driver: through 295.71; through 304.32

References

http://nvidia.custhelp.com/app/answers/detail/a_id/3140
http://seclists.org/fulldisclosure/2012/Aug/4
http://seclists.org/fulldisclosure/2012/Aug/76
http://security.gentoo.org/glsa/glsa-201304-01.xml
http://www.openwall.com/lists/oss-security/2012/08/01/1
http://www.openwall.com/lists/oss-security/2012/08/08/4
http://nvidia.custhelp.com/app/answers/detail/a_id/3140
http://seclists.org/fulldisclosure/2012/Aug/4
http://seclists.org/fulldisclosure/2012/Aug/76
http://security.gentoo.org/glsa/glsa-201304-01.xml
http://www.openwall.com/lists/oss-security/2012/08/01/1
http://www.openwall.com/lists/oss-security/2012/08/08/4

Get alerted when CVE-2012-4225 or the next vulnerability affects your stack