CVE-2012-0952 - CVE House
Back to Database
Status published Medium CVE-2012-0952

Heap overflow in control device ioctl

Vulnerability Description

A heap buffer overflow was discovered in the device control ioctl in the Linux driver for Nvidia graphics cards, which may allow an attacker to overflow 49 bytes. This issue was fixed in version 295.53.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-0952

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Kees Cook

References

More from nvidia

View All →
CVE-2024-0103
CVE
Medium 5.4
CVE-2024-0100
CVE
Medium 6.5
CVE-2024-0099
CVE
High 7.8
CVE-2024-0098
CVE
Medium 5.5
CVE-2024-0097
CVE
High 7.5

Affected Vendor

Affected Software

graphics drivers
Vulnerable Versions:
unspecified

Timeline

Official Publish: May 8th, 2020
Last Modified: September 16th, 2024
Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L

Weaknesses (CWE)

CWE-119

MITRE ATT&CK TTPs

T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1203 Exploitation for Client Execution
Execution
T1055 Process Injection
Defense Evasion
T1105 Ingress Tool Transfer
Command and Control