CVE-2016-5025

Severity: medium (CVSS 6.6 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-11-08 · updated 2026-06-17
Weakness: CWE-20

Description

For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVAPI support layer causes a denial of service vulnerability (blue screen crash) within the NVIDIA Windows graphics drivers.

Affected products

Nvidia Corporation GPU Display Driver: from 340 before 341.96; from 352.0 before 354.99; from 361 before 362.77; from 367 before 368.39 — fixed in 341.96, 354.99, 362.77, 368.39

How to fix

Upgrade to a fixed version: Nvidia Corporation GPU Display Driver 341.96, 354.99, 362.77, 368.39. Check the vendor advisory for mitigations.

References

http://nvidia.custhelp.com/app/answers/detail/a_id/4213
http://www.securityfocus.com/bid/93251
https://support.lenovo.com/us/en/product_security/ps500070
http://nvidia.custhelp.com/app/answers/detail/a_id/4213
http://www.securityfocus.com/bid/93251
https://support.lenovo.com/us/en/product_security/ps500070

Get alerted when CVE-2016-5025 or the next vulnerability affects your stack