CVE-2016-1846

The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference and memory corruption) via a crafted app.

Affected products

Nvidia Graphics Drivers

Apple Mac Os X

≤ 10.11.4

Fix

Available

CVSS 2.0

9.3 HIGH

CVSS 3.1

7.8 HIGH

EPSS

4.8% (91th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2016-05-20