CVE-2019-5695 Details
Description
NVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions) contains a vulnerability in the local service provider component in which an attacker with local system and privileged access can incorrectly load Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), which may lead to denial of service or information disclosure through code execution.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://nvidia.custhelp.com/app/answers/detail/a_id/4860 | CVE | PatchVendor Advisory |
| https://nvidia.custhelp.com/app/answers/detail/a_id/4907 | CVE | PatchVendor Advisory |
| https://safebreach.com/Post/NVIDIA-GPU-Display-Drivers-for-Windows-and-GFE-Software-DLL-Preloading-and-Potential-Abuses-CVE-2019-5694-CVE-2019-5695 | CVE | ExploitThird Party Advisory |
| https://nvidia.custhelp.com/app/answers/detail/a_id/4860 | [email protected] | PatchVendor Advisory |
| https://nvidia.custhelp.com/app/answers/detail/a_id/4907 | [email protected] | PatchVendor Advisory |
| https://safebreach.com/Post/NVIDIA-GPU-Display-Drivers-for-Windows-and-GFE-Software-DLL-Preloading-and-Potential-Abuses-CVE-2019-5694-CVE-2019-5695 | [email protected] | ExploitThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-427 | Uncontrolled Search Path Element | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| nvidia geforce experience | < 3.20.1 |
CPE
Remediation
| |
| nvidia gpu driver | All versions |
CPE
Remediation
| |
| microsoft windows | All versions |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Jan 1, 2022 | Modified Analysis | [email protected] |
| Jul 21, 2021 | CWE Remap | [email protected] |
| Nov 18, 2019 | CVE Modified | [email protected] |
| Nov 14, 2019 | Initial Analysis | [email protected] |