CVE-2016-4959

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-11-08 · updated 2026-06-17
Weakness: CWE-476

Description

For the NVIDIA Quadro, NVS, and GeForce products, there is a Remote Desktop denial of service. A successful exploit of a vulnerable system will result in a kernel null pointer dereference, causing a blue screen crash.

Affected products

Nvidia Corporation GPU Display Driver: from 340 before 341.96; from 352.0 before 354.99; from 361 before 362.77; from 367 before 368.39 — fixed in 341.96, 354.99, 362.77, 368.39

How to fix

Upgrade to a fixed version: Nvidia Corporation GPU Display Driver 341.96, 354.99, 362.77, 368.39. Check the vendor advisory for mitigations.

References

http://nvidia.custhelp.com/app/answers/detail/a_id/4213
http://www.securityfocus.com/bid/93256
http://www.tripwire.com/state-of-security/vulnerability-management/warning-this-post-contains-graphic-nvidia-content/
https://support.lenovo.com/us/en/product_security/ps500070
http://nvidia.custhelp.com/app/answers/detail/a_id/4213
http://www.securityfocus.com/bid/93256
http://www.tripwire.com/state-of-security/vulnerability-management/warning-this-post-contains-graphic-nvidia-content/
https://support.lenovo.com/us/en/product_security/ps500070

Get alerted when CVE-2016-4959 or the next vulnerability affects your stack