CVE-2012-0952CWE-119

Heap overflow in control device ioctl

Medium · published May 8, 2020

CVSS v3.1
5.0
EPSS
0%
Percentile
22.1
In the wild
Unconfirmed
What it is

A heap buffer overflow was discovered in the device control ioctl in the Linux driver for Nvidia graphics cards, which may allow an attacker to overflow 49 bytes. This issue was fixed in version 295.53.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00306 · 22.1th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2020-05-08T00:50Z
EPSS history
Timeline
  • 08 MAY 00:50Z
    Heap overflow in control device ioctl
    cvelistv5