CVE-2019-5695 - NVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions) contains a vulnerability in the local service provider component in which an attacker with local system and privileged access can incorrectly load Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), which may lead to denial of service or information disclosure through code execution

Back Back to CVE browser

MEDIUM

NVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions) contains a vulnerability in the local service provider component in which an attacker with local system and privileged access can incorrectly load Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), which may lead to denial of service or information disclosure through code execution

Published Nov 12, 2019

6.5

MEDIUM

CVSS 3.1

EPSS 0.92%

Description

NVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions) contains a vulnerability in the local service provider component in which an attacker with local system and privileged access can incorrectly load Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), which may lead to denial of service or information disclosure through code execution.

Affected products

Vendor NVIDIA Product NVIDIA GeForce Experience Default
n/a
- Version
  prior to 3.20.1
  Status
  affected
  Constraints
  -
Vendor NVIDIA Product NVIDIA Windows GPU Display Driver Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

NVIDIA

NVIDIA GeForce Experience

n/a

Version	Status	Constraints
prior to 3.20.1	affected	-

NVIDIA

NVIDIA Windows GPU Display Driver

n/a

Version	Status	Constraints
all versions	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-427

References (3)

https://nvidia.custhelp.com/app/answers/detail/a_id/4860
x_refsource_CONFIRMPatchVendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/4907
x_refsource_CONFIRMPatchVendor Advisory
https://safebreach.com/Post/NVIDIA-GPU-Display-Drivers-for-Windows-and-GFE-Software-DLL-Preloading-and-Potential-Abuses-CVE-2019-5694-CVE-2019-5695
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://nvidia.custhelp.com/app/answers/detail/a_id/4860		x_refsource_CONFIRMPatchVendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/4907		x_refsource_CONFIRMPatchVendor Advisory
https://safebreach.com/Post/NVIDIA-GPU-Display-Drivers-for-Windows-and-GFE-Software-DLL-Preloading-and-Potential-Abuses-CVE-2019-5694-CVE-2019-5695		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner nvidia

Published Nov 12, 2019

Updated Aug 4, 2024

Reserved Jan 7, 2019

Link CVE-2019-5695

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-5695

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-5695