NVIDIA vulnerabilities
Published CVEs affecting NVIDIA products: 436 record(s), with severity, exploitation and fixes.
GeForce 120Tesla 119NVIDIA RTX, Quadro, NVS 116Virtual GPU Manager 67Guest driver 63Megatron-Bridge 43Nemo Megatron Bridge 43Triton Inference Server 36Nemo 21NeMo Framework 21DGX Spark 20Tensorrt Llm 16Dynamo 15Dgx Os 15Nemoclaw 14Infra Controller 14Infrastructure Controller 14Gpu Display Driver 12Megatron-lm 10AIStore framework 9DALI 7Openshell 6Tensorrt 6Unified Fabric Manager Enterprise - LTS 2023 5Unified Fabric Manager Enterprise - LTS 2024 5Unified Fabric Manager Enterprise - LTS 2025 5Nemo Speech 5Dgx Spark Uefi 5Cumulus Linux GA 5Unified Fabric Manager Enterprise - GA 5Cumulus Linux 5Cumulus Linux LTS 4RTX PRO, RTX, Quadro 4Nvos 4ConnectX LTS24 4BlueField GA 4Bionemo Framework 4Cuda Toolkit 4BlueField LTS23 4BlueField LTS24 4
CVE-2026-24259
Medium · 6.4
CWE-306 Jul 14, 2026
Missing Authentication for Critical Function in NVIDIA Tensorrt Llm
NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-24238
High · 7.8
CWE-129 Jul 14, 2026
NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper…
NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index. A successful exploit of this vulnerability might lead to code execution.
CVE-2026-24234
Medium · 6.8
CWE-918 Jul 14, 2026
Server-Side Request Forgery (SSRF) in NVIDIA Tensorrt Llm
NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal media fetching functions, where a network-accessible attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to denial of service and information disclosure.
CVE-2026-24233
High · 8.4
CWE-502 Jul 14, 2026
Deserialization of Untrusted Data in NVIDIA Tensorrt Llm
NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24229
High · 7.3
CWE-306 Jul 14, 2026
Missing Authentication for Critical Function in NVIDIA Tensorrt Llm
NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by sending requests to the FastAPI server. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service.
CVE-2026-24227
Critical · 9.8
CWE-502 Jul 14, 2026
Deserialization of Untrusted Data in NVIDIA Tensorrt
NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution.
CVE-2026-24226
Medium · 6.3
CWE-829 Jul 14, 2026
NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause…
NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-24220
Medium · 6.4
CWE-502 Jul 14, 2026
Deserialization of Untrusted Data in NVIDIA Tensorrt Llm
NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution.
CVE-2026-47482
High · 7.5
CWE-401 Jul 14, 2026
Missing Release of Memory after Effective Lifetime in NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifetime. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-47481
Medium · 6.5
CWE-288 Jul 14, 2026
Authentication Bypass Using an Alternate Path or Channel in NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternative path or channel. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2026-47480
High · 7.5
CWE-248 Jul 14, 2026
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can…
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exception. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-47479
High · 7.5
CWE-400 Jul 14, 2026
Uncontrolled Resource Consumption in NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-47478
High · 7.5
CWE-910 Jul 14, 2026
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can…
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an expired file descriptor. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-47477
High · 7.5
CWE-121 Jul 14, 2026
Stack-based Buffer Overflow in NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-47476
High · 7.5
CWE-400 Jul 14, 2026
Uncontrolled Resource Consumption in NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24270
Critical · 9.8
CWE-290 Jul 1, 2026
Authentication Bypass by Spoofing in NVIDIA AIStore framework
NVIDIA AIStore framework contains a vulnerability where an attacker could bypass authentication. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering.
CVE-2026-24266
High · 7.5
CWE-416 Jul 1, 2026
Use After Free in NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a use-after-free issue. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24264
High · 7.5
CWE-409 Jul 1, 2026
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can…
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause improper handling of highly compressed data. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24260
High · 8.5
CWE-367 Jul 1, 2026
TOCTOU Race Condition in NVIDIA Container Toolkit
NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use race condition. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, and data tampering.
CVE-2026-24251
High · 7.8
CWE-502 Jul 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resources. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24250
High · 7.8
CWE-502 Jul 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper validation of allowed inputs. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24249
High · 7.8
CWE-94 Jul 1, 2026
Code Injection in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24248
High · 7.8
CWE-94 Jul 1, 2026
Code Injection in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24247
High · 7.8
CWE-502 Jul 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24246
High · 7.8
CWE-470 Jul 1, 2026
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause…
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resources. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.