Heap overflow in control device ioctl

published 2020-05-08 6 y ago modified 2026-06-16 4 mo ago also EUVD-2012-0975

cvss: 5.0; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.3%; EPSS 0.3% chance of exploitation in 30 days, percentile 23%
public exploits: 0; none known

A heap buffer overflow was discovered in the device control ioctl in the Linux driver for Nvidia graphics cards, which may allow an attacker to overflow 49 bytes. This issue was fixed in version 295.53.

Patch / fix

fixed in 1 distros 1

nvidia graphics drivers 295.53

nvidia-graphics-drivers Debian 14, Debian 13, Debian 12 295.53-1

debian advisories DEBIAN-CVE-2012-0952

Exploit prediction

0.31% chance of exploitation in the next 30 days, higher than 23% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

bugs.launchpad.net https://bugs.launchpad.net/ubuntu/+source/nvidia-graphics-drivers/+bug/979373 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CNA	3.1	5.0	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
NVD	3.1	5.0	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
NVD	2.0	4.4	AV:L/AC:M/Au:N/C:P/I:P/A:P

Affected products

nvidia graphics drivers

Classification

Weakness

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-787 Out-of-bounds Write

References

bugs.launchpad.net /ubuntu/+source/nvidia-graphics-drivers/+bug/979373
exploit, third-party-advisory

Sources

CVE List CVE-2012-0952
NVD CVE-2012-0952

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary