The latest NVIDIA drivers, the GeForce 430.64 add quite important security patches to ensure the safety of users.
Having well updated drivers is highly important, not only because it improves performance, but also because it adds security. Recently NVIDIA has released the GeForce 430.64 drivers, which add enhancements and optimization for various games. But it is also that these drivers add security patches for Windows. Users are protected from serious security vulnerabilities. An attacker could perform a denial of service (DoS) attack or gain administrator privileges. This assumes that the system is fully compromised.
NVIDIA adds security patch to GeForce 430.64 drivers
This security patch is focused on Tesla and Quadro professional graphics, but also gaming graphics. Not all have received support to correct these problems. Those that still do not correct the problem will receive specific patches between May 12-20.
The CVE-2019-5675 issue, which is the most troublesome of the three, is fixed. It is a security hole in the core of one of the elements of the controller. The kernel is an important part of the driver that gets special privileges on the data that can be accessed and modified. A problem in the controller "not syncing shared data correctly." An attacker or malware software could gain control of the system, carry out a denial of service attack, or obtain data with ease.
We move on to bug CVE-2019-5676 which refers to the driver not checking certain files validated by Windows. An attacker could replace the DLL files and make the system believe they are legitimate and initiate an attack or trap. DLL files are usually run automatically as part of the software. This means that the user or the system never detects that a DLL file is infected by malware.
The last of the vulnerabilities is CVE-2019-5677, which refers to a minor security problem that could lead to denial of service attacks. It would also have to do with a security hole in the core of the controller.
Source: TH
