Posted past times Oliver Chang Modern graphic drivers are complicated as well as furnish a large promising laid on surface for EoPs as well as sandbox escapes from processes that conduct hold access to the GPU (e.g. the Chrome GPU process). In this weblog postal service we’ll convey a human face at attacking the NVIDIA core way Windows drivers, as well as a few of the bugs that I found. I did this inquiry equally constituent of a 20% projection alongside , during which a full of 16 vulnerabilities were discovered. Kernel WDDM interfaces The core way gene of a graphics driver is referred to equally the display miniport driver. Microsoft’s documentation has a overnice diagram that summarises the human relationship betwixt the diverse components: In the DriverEntry() for display miniport drivers, a DRIVER_INITIALIZATION_DATA construction is populated alongside callbacks to the vendor implementations of functions that genuinely interact alongside the hardware, which is p...