CVE-2016-7381 is a high-severity vulnerability affecting NVIDIA Windows GPU Display Drivers (R340 before 342.00 and R375 before 375.63) for Quadro, NVS, and GeForce products. It stems from a missing bounds check in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape, allowing a local attacker to cause a denial of service or potentially escalate privileges. With a CVSS v3 score of 7.8, this vulnerability is easily exploitable with low attack complexity and user interaction, leading to high impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 340, < 342.00CPE matchmatch criteria | cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:* | ||
>= 375, < 375.63CPE matchmatch criteria | cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.