CVE-2016-2558

Severity: high (CVSS 8.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-04-12 · updated 2026-06-17
Weakness: CWE-119

Description

The Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340 before 341.95 and R352 before 354.74 on Windows allows local users to obtain sensitive information, cause a denial of service (crash), or gain privileges via unspecified vectors related to an untrusted pointer, which trigger uninitialized or out-of-bounds memory access.

Affected products

NVIDIA Gpu Driver R340: 431.61
NVIDIA Gpu Driver R352: 353.82

References

http://nvidia.custhelp.com/app/answers/detail/a_id/4061
https://support.lenovo.com/us/en/product_security/len_5551
http://nvidia.custhelp.com/app/answers/detail/a_id/4061
https://support.lenovo.com/us/en/product_security/len_5551

Get alerted when CVE-2016-2558 or the next vulnerability affects your stack