CVE-2015-5053

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-11-24 · updated 2026-06-17
Weakness: CWE-284

Description

The host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346.87 and R352 before 352.41 for Linux and R352 before 352.46 for GRID vGPU and vSGA does not properly restrict access to third-party device IO memory, which allows attackers to gain privileges, cause a denial of service (resource consumption), or possibly have unspecified other impact via unknown vectors related to the follow_pfn kernel-mode API call.

Affected products

Nvidia Corporation GPU Display Driver: 346.16, 346.22, 346.35, 346.47, 346.59, 346.72 (+5)

References

http://nvidia.custhelp.com/app/answers/detail/a_id/3802
http://nvidia.custhelp.com/app/answers/detail/a_id/3802

Get alerted when CVE-2015-5053 or the next vulnerability affects your stack