Vulnerability Spotlight: Multiple Nvidia D3D10 Driver Pixel Shader Vulnerabilities
Summary: Cisco Talos reported multiple NVIDIA D3D10 driver pixel shader vulnerabilities, discovered by Piotr Bania, triggered by supplying a malformed pixel shader in text or binary form to the NVIDIA nvwgf2umx.dll driver. The flaws can be triggered from local usermode, from a VMware guest usermode to cause memory corruption or a denial-of-service on the host's vmware-vmx.exe process, and theoretically through WebGL from a remote website if the browser does not use ANGLE.
What you should know: One described mechanism lets a shader cause function sub_038B150 to call itself recursively with no validation of recursion count or stack memory borders, exhausting stack memory and causing denial of service. A malformed shader reaching this driver from a VMware guest can corrupt memory on the host, so the blast radius extends past the guest boundary.
Read the original at Cisco Talos ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026