CVE-2016-2557

Severity: high (CVSS 8.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-04-12 · updated 2026-06-17
Weakness: CWE-264

Description

The Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340 before 341.95 and R352 before 354.74 on Windows allows local users to obtain sensitive information from kernel memory, cause a denial of service (crash), or possibly gain privileges via unspecified vectors, which trigger uninitialized or out-of-bounds memory access.

Affected products

NVIDIA Gpu Driver R340: 431.61
NVIDIA Gpu Driver R352: 353.82

References

http://nvidia.custhelp.com/app/answers/detail/a_id/4060
https://support.lenovo.com/us/en/product_security/len_5551
http://nvidia.custhelp.com/app/answers/detail/a_id/4060
https://support.lenovo.com/us/en/product_security/len_5551

Get alerted when CVE-2016-2557 or the next vulnerability affects your stack