CVE-2020-5964

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-06-25 · updated 2026-06-17
Weakness: CWE-345

Description

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure.

Affected products

Quadro, NVS, and GeForce (all versions): before 3.20.4 — fixed in 3.20.4
NVIDIA Geforce Firmware: from 450 before 451.48 — fixed in 451.48
NVIDIA Nvs Firmware: from 390 before 392.61; from 418 before 426.78; from 440 before 443.18; from 450 before 451.48 — fixed in 392.61, 426.78, 443.18, 451.48
NVIDIA Quadro Firmware: from 390 before 392.61; from 418 before 426.78; from 440 before 443.18; from 450 before 451.48 — fixed in 392.61, 426.78, 443.18, 451.48
NVIDIA Tesla Firmware: from 418 before 426.78; from 440 before 443.18; from 450 before 451.48 — fixed in 426.78, 443.18, 451.48

How to fix

Upgrade to a fixed version: Quadro, NVS, and GeForce (all versions) 3.20.4; NVIDIA Geforce Firmware 451.48; NVIDIA Nvs Firmware 392.61, 426.78, 443.18, 451.48; NVIDIA Quadro Firmware 392.61, 426.78, 443.18, 451.48; NVIDIA Tesla Firmware 426.78, 443.18, 451.48. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-5964 or the next vulnerability affects your stack