CVE-2016-8812
Status: ModifiedHigh (8.8)—💥 Exploit
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before GFE 3.1.0.52 contains a vulnerability in the kernel mode layer (nvstreamkms.sys) allowing a user to cause a stack buffer overflow with specially crafted executable paths, leading to a denial of service or escalation of privileges.
CVSS
- Version: 3.0
- Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Base score: 8.8
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 1.61%
- Percentile among all scored CVEs: 75
- Score date: 10/7/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
💥 Public exploits
Exploit code or detection templates are publicly available. This is not the same as confirmed active exploitation (KEV), but it raises the risk: patch with priority.
- Published on Exploit-DB · NVIDIA Driver - NvStreamKms 'PsSetCreateProcessNotifyRoutineEx Local Stack Buffer Overflow Callback / Local Privilege Escalation (10/31/2016)
Affected technologies (1)
CWEs
- CWE-119
References
Raw JSON (NVD)
Show
{
"id": "CVE-2016-8812",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.2,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.0",
"baseScore": 8.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 6,
"exploitabilityScore": 2
}
]
},
"affected": [
{
"source": "psirt@nvidia.com",
"affectedData": [
{
"vendor": "n/a",
"product": "Quadro, NVS, and GeForce (all versions)",
"versions": [
{
"status": "affected",
"version": "Quadro, NVS, and GeForce (all versions)"
}
]
}
]
}
],
"published": "2016-11-08T20:59:25.850",
"references": [
{
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4247",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@nvidia.com"
},
{
"url": "http://www.securityfocus.com/bid/93986",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "psirt@nvidia.com"
},
{
"url": "https://www.exploit-db.com/exploits/40660/",
"source": "psirt@nvidia.com"
},
{
"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4247",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/93986",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.exploit-db.com/exploits/40660/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before GFE 3.1.0.52 contains a vulnerability in the kernel mode layer (nvstreamkms.sys) allowing a user to cause a stack buffer overflow with specially crafted executable paths, leading to a denial of service or escalation of privileges."
},
{
"lang": "es",
"value": "Para los productos NVIDIA Quadro, NVS y GeForce, NVIDIA Windows GPU Display Driver R340 before 342.00, R367 before 369.59, and R375 en versiones anteriores a 375.63 contiene una vulnerabilidad en el controlador de la capa de modo kernel (nvlddmkm.sys) para DxgDdiEscape ID 0x7000014 donde un valor pasado de un usuario al controlador es utilizado sin validación como el índice de una matriz interna, conduciendo a una denegación de servicio o potencial escalada de privilegios."
}
],
"lastModified": "2026-06-17T00:55:02.657",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:nvidia:geforce_experience:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F36E098A-0BCE-41CF-8AF6-3C32E18C8256",
"versionEndIncluding": "-"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:nvidia:geforce_910m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C6C6E52F-EE00-4CE3-B9F9-0ED847DE3FB9"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_920m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "26641568-53CE-4606-B2CA-C25A97795A50"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_920mx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "02BAA7E2-E4F5-44C9-BEDF-7425B0C56578"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_930m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "05A831E4-1119-45F0-B9A0-4D948ECD47E6"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_930mx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1F50D6AC-3D1E-4E54-8422-B717456F6257"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_940m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "03CBD29C-A606-45DE-B2FB-8572B986A4F0"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_940mx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "44BF5DC1-4609-4F34-9511-785F7B119ADE"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_945m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3724F083-A7FC-4069-AC35-FB8AA08B6CCD"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_gt_710:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1B72BBAC-CEBD-4405-B1EC-7535794FF5EB"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_gt_730:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A2C9365F-B4A5-4EA2-917B-2F07457017EB"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_gtx_1050:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D835EE77-6031-40D6-8305-F962F42E7018"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_gtx_1060:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F0ED6F8E-1F82-4C50-9EEF-A5F58DB440AD"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_gtx_1070:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E884CEDD-CAA5-489D-A526-B628BB3DE460"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_gtx_1080:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9E3455DE-4408-4603-86B2-5ECE76ED459C"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_gtx_950m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C29EDF54-BEA4-49B4-96E9-CDE62F38E3DF"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_gtx_960m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3EAB33B6-E270-4C11-8E57-2BE127C86134"
},
{
"criteria": "cpe:2.3:h:nvidia:geforce_gtx_965m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AF0C08C8-AC1B-4A01-903A-FB56B75CAE55"
},
{
"criteria": "cpe:2.3:h:nvidia:nvs_310:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2B376C04-8A35-42E7-8937-1A466E89639A"
},
{
"criteria": "cpe:2.3:h:nvidia:nvs_315:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F13EE983-724F-472B-BCF5-B416D1DF27E1"
},
{
"criteria": "cpe:2.3:h:nvidia:nvs_510:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CBDF0898-E092-42BA-A777-FB7C5FFC4D3C"
},
{
"criteria": "cpe:2.3:h:nvidia:nvs_810:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "41B48700-10AB-4194-94BC-D0F177D0B56A"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_k1200:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B84A5C10-5B3E-48F1-8F66-4B9EE9C78D24"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_k420:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BD3B7EE4-080F-4E3C-8304-0837AC20ECCD"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_k620:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7E03A4C2-72EF-44FC-9F97-626C8E8A17EA"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m1000m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3896B47E-8787-45D2-96B3-BF4892780F35"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m2000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "316C9573-7C7D-4429-8563-B74FD752AC51"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m2000m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6FEC13EF-BB2F-4ED2-BC8B-8234ABAEEE02"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m3000m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B5E13B65-F61B-44D4-B1D7-1E96D9CB45BD"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m4000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "76ABA317-6621-4D57-874F-307451EC9C2E"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m4000m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "477D72B5-A3EA-440A-B495-8A09E8564E8D"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m5000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F2B507EE-F005-4806-A8FC-8C8D9A31B0DB"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m5000m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DAD67DC6-AA36-4F93-B8DB-77EB8C153BCA"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m500m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E707A80B-6482-47DD-8BF3-6E58BC2C697A"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m5500:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0E8D2AC7-DC75-4BBA-BF4E-58BF88B49B11"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m6000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "ED233BC3-6982-41E1-9205-5159C17A4A56"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_m600m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7C186F38-89C7-4616-A424-201804F842C9"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_p5000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DCDC421C-3B8F-4EAA-A2D4-14C14CD7F3DB"
},
{
"criteria": "cpe:2.3:h:nvidia:quadro_p6000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "60176B23-2751-4415-A0D3-DF1BE640F6C3"
},
{
"criteria": "cpe:2.3:h:nvidia:titan_x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2FABA79A-A70A-40A5-ADA7-893EAB42FE9E"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@nvidia.com"
}