CVE-2006-5379Binary Graphics Driver Vulnerability
The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be…
Published Oct 18, 2006 · Updated Aug 4, 2026 · Also known as DEBIAN-CVE-2006-5379
Key Facts
Patch immediately- CVE-2006-5379 is a high-severity vulnerability (CVSS 7.5 v2) affecting Binary Graphics Driver (Nvidia), nvidia-graphics-drivers (debian).
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 27% probability of exploitation in the next 30 days.
- Fixed versions are available, including nvidia-graphics-drivers 1.0.8776-1.
- Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Scores
CVSS v2
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS (30-day exploit likelihood)
27%
Higher than 98.0% of all scored CVEs
Exploit maturity
Proof of concept
ATLAS score
39/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Not listed
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Proof of concept
Public exploit code
1
Proof-of-concept links
In-the-wild evidence
1
Reports of active use
Advisories And Exploit References
Description
The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.
Affected Products
13 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| Binary Graphics DriverNvidia | v8762, v8774 | n/a |
| nvidia-graphics-driversdebian | See advisory | 1.0.8776-1 |
Patched Releases
nvidia-graphics-drivers
1.0.8776-1
Timeline
Publicly disclosed
Oct 18, 2006
Last updated
Aug 4, 2026
References
- advisorysecurity-tracker.debian.org · CVE-2006-5379
- advisory22419
- advisoryrapid7.com · R7-0025.jsp
- exploitdownload2.rapid7.com · nv_exploit.c
- exploitExploitDB-2581
FAQ
Common Questions.
The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory location…
Affected: Binary Graphics Driver (Nvidia) versions v8762, v8774; nvidia-graphics-drivers (debian). The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including nvidia-graphics-drivers 1.0.8776-1.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Is CVE-2006-5379 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo