CVE-2020-5964

High

Description

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure.

SeverityHigh
CVSS7.8
Exploit probability—
ProductNvidia Quadro Firmware
PublishedJun 25, 2020
First seenJun 25, 2020

How to fix

Update
  • nvidia quadro_firmware392.61, 426.78, 443.18, 451.48 or later
  • nvidia tesla_firmware426.78, 443.18, 451.48 or later
  • nvidia geforce_experience3.20.4 or later
  • nvidia nvs_firmware392.61, 426.78, 443.18, 451.48 or later
  • nvidia geforce_firmware451.48 or later

Affected products

ProductAffected versionsFixed in
nvidia quadro_firmware390 ≤ v < 392.61, 418 ≤ v < 426.78, 440 ≤ v < 443.18, 450 ≤ v < 451.48392.61, 426.78, 443.18, 451.48
nvidia tesla_firmware418 ≤ v < 426.78, 440 ≤ v < 443.18, 450 ≤ v < 451.48426.78, 443.18, 451.48
nvidia geforce_experiencev < 3.20.43.20.4
nvidia nvs_firmware390 ≤ v < 392.61, 418 ≤ v < 426.78, 440 ≤ v < 443.18, 450 ≤ v < 451.48392.61, 426.78, 443.18, 451.48
nvidia geforce_firmware450 ≤ v < 451.48451.48

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.