NVIDIA vulnerabilities
Published CVEs affecting NVIDIA products: 436 record(s), with severity, exploitation and fixes.
GeForce 120Tesla 119NVIDIA RTX, Quadro, NVS 116Virtual GPU Manager 67Guest driver 63Megatron-Bridge 43Nemo Megatron Bridge 43Triton Inference Server 36Nemo 21NeMo Framework 21DGX Spark 20Tensorrt Llm 16Dynamo 15Dgx Os 15Nemoclaw 14Infra Controller 14Infrastructure Controller 14Gpu Display Driver 12Megatron-lm 10AIStore framework 9DALI 7Openshell 6Tensorrt 6Unified Fabric Manager Enterprise - LTS 2023 5Unified Fabric Manager Enterprise - LTS 2024 5Unified Fabric Manager Enterprise - LTS 2025 5Nemo Speech 5Dgx Spark Uefi 5Cumulus Linux GA 5Unified Fabric Manager Enterprise - GA 5Cumulus Linux 5Cumulus Linux LTS 4RTX PRO, RTX, Quadro 4Nvos 4ConnectX LTS24 4BlueField GA 4Bionemo Framework 4Cuda Toolkit 4BlueField LTS23 4BlueField LTS24 4
CVE-2026-24245
High · 7.8
CWE-502 Jul 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24244
High · 7.8
CWE-502 Jul 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24243
High · 7.8
CWE-502 Jul 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24242
High · 7.8
CWE-918 Jul 1, 2026
Server-Side Request Forgery (SSRF) in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2026-24240
High · 7.8
CWE-502 Jul 1, 2026
Deserialization of Untrusted Data in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2025-23351
Critical · 9.0
CWE-787 Jul 1, 2026
Out-of-bounds Write in NVIDIA BlueField GA
NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.
CVE-2025-23350
Critical · 9.0
CWE-787 Jul 1, 2026
Out-of-bounds Write in NVIDIA BlueField GA
NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.
CVE-2026-24228
High · 7.8
CWE-502 Jun 16, 2026
Deserialization of Untrusted Data in NVIDIA Nemo
NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24155
High · 7.8
CWE-94 Jun 16, 2026
Code Injection in NVIDIA Nemo
NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2026-24181
High · 7.3
CWE-129 Jun 9, 2026
NVIDIA DALI contains a vulnerability in a component where an attacker could cause an…
NVIDIA DALI contains a vulnerability in a component where an attacker could cause an improper index validation. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.
CVE-2026-24180
High · 7.3
CWE-122 Jun 9, 2026
Heap-based Buffer Overflow in NVIDIA Data Loading Library
NVIDIA DALI contains a vulnerability in a component where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.
CVE-2026-24237
High · 7.8
CWE-502 Jun 2, 2026
Deserialization of Untrusted Data in NVIDIA Nvtabular
NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-24221
High · 7.8
CWE-502 Jun 2, 2026
Deserialization of Untrusted Data in NVIDIA Nvtabular
NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering and information disclosure.
CVE-2026-24201
Medium · 5.8
CWE-787 May 26, 2026
Out-of-bounds Write in NVIDIA Virtual GPU Manager
NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause an out-of-bound access. A successful exploit of this vulnerability might lead to data tampering, denial of service, or information disclosure.
CVE-2026-24200
High · 7.0
CWE-416 May 26, 2026
Use After Free in NVIDIA Virtual GPU Manager
NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free for stack memory. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
CVE-2026-24199
Medium · 4.7
CWE-362 May 26, 2026
Race Condition in NVIDIA Gpu Display Driver
NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24198
Medium · 5.6
CWE-200 May 26, 2026
Exposure of Sensitive Information in NVIDIA GeForce
NVIDIA GPU Display Driver for Linux contains a vulnerability where an advanced attacker could use a race condition to leak sensitive memory, which might cause limited exposure of sensitive information to an unauthorized actor. A successful exploit of this vulnerability might lead to denial of service, data tampering, and information disclosure.
CVE-2026-24197
Medium · 6.5
CWE-1188 May 26, 2026
Insecure Default Initialization of Resource in NVIDIA Gpu Display Driver
NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24196
High · 7.1
CWE-125 May 26, 2026
Out-of-bounds Read in NVIDIA Gpu Display Driver
NVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to denial of service and information disclosure.
CVE-2026-24195
Medium · 5.5
CWE-20 May 26, 2026
Improper Input Validation in NVIDIA Gpu Display Driver
NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24194
High · 7.8
CWE-281 May 26, 2026
NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler…
NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission handling. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
CVE-2026-24193
High · 7.8
CWE-787 May 26, 2026
Out-of-bounds Write in NVIDIA Gpu Display Driver
NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
CVE-2026-24192
High · 7.8
CWE-681 May 26, 2026
NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause…
NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between numeric types, leading to a heap buffer overflow. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
CVE-2026-24191
High · 7.8
CWE-367 May 26, 2026
TOCTOU Race Condition in NVIDIA Gpu Display Driver
NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
CVE-2026-24190
High · 7.8
CWE-862 May 26, 2026
Missing Authorization in NVIDIA Gpu Display Driver
NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GPU resources. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.