CVE-2015-8328

Name	CVE-2015-8328
Description	Unspecified vulnerability in the NVAPI support layer in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows allows local users to obtain sensitive information, cause a denial of service (crash), or possibly gain privileges via unknown vectors. NOTE: this identifier was SPLIT from CVE-2015-7869 per ADT2 and ADT3 due to different vulnerability types and affected versions.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
nvidia-graphics-drivers (PTS)	buster/non-free	418.226.00-3	fixed
	bullseye/non-free	470.223.02-1	fixed
	bookworm/non-free-firmware	525.147.05-4~deb12u1	fixed
	trixie/non-free-firmware	525.147.05-10	fixed
	sid/non-free-firmware	535.161.08-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
nvidia-graphics-drivers	source	(unstable)	(not affected)

- nvidia-graphics-drivers <not-affected> (Windows only)