NVIDIA vulnerabilities
Published CVEs affecting NVIDIA products: 436 record(s), with severity, exploitation and fixes.
GeForce 120Tesla 119NVIDIA RTX, Quadro, NVS 116Virtual GPU Manager 67Guest driver 63Megatron-Bridge 43Nemo Megatron Bridge 43Triton Inference Server 36Nemo 21NeMo Framework 21DGX Spark 20Tensorrt Llm 16Dynamo 15Dgx Os 15Nemoclaw 14Infra Controller 14Infrastructure Controller 14Gpu Display Driver 12Megatron-lm 10AIStore framework 9DALI 7Openshell 6Tensorrt 6Unified Fabric Manager Enterprise - LTS 2023 5Unified Fabric Manager Enterprise - LTS 2024 5Unified Fabric Manager Enterprise - LTS 2025 5Nemo Speech 5Dgx Spark Uefi 5Cumulus Linux GA 5Unified Fabric Manager Enterprise - GA 5Cumulus Linux 5Cumulus Linux LTS 4RTX PRO, RTX, Quadro 4Nvos 4ConnectX LTS24 4BlueField GA 4Bionemo Framework 4Cuda Toolkit 4BlueField LTS23 4BlueField LTS24 4
CVE-2025-33244
Critical · 9.0
CWE-502 Mar 24, 2026
Deserialization of Untrusted Data in NVIDIA Apex
NVIDIA APEX for Linux contains a vulnerability where an unauthorized attacker could cause a deserialization of untrusted data. This vulnerability affects environments that use PyTorch versions earlier than 2.6. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, data tampering, and information disclosure.
CVE-2025-33242
Medium · 5.9
CWE-1234 Mar 24, 2026
NVIDIA B300 MCU contains a vulnerability in the CX8 MCU that could allow a malicious…
NVIDIA B300 MCU contains a vulnerability in the CX8 MCU that could allow a malicious actor to modify unsupported registries, causing a bad state. A successful exploit of this vulnerability might lead to denial of service and data tampering.
CVE-2025-33238
High · 7.5
CWE-362 Mar 24, 2026
Race Condition in NVIDIA Triton Inference Server
NVIDIA Triton Inference Server Sagemaker HTTP server contains a vulnerability where an attacker may cause an exception. A successful exploit of this vulnerability may lead to denial of service.
CVE-2025-33216
Medium · 6.8
CWE-131 Mar 24, 2026
NVIDIA SNAP-4 Container contains a vulnerability in the configuration interface where an…
NVIDIA SNAP-4 Container contains a vulnerability in the configuration interface where an attacker on a VM may cause an incorrect calculation of buffer size by sending crafted configurations. A successful exploit of this vulnerability may lead to crash of the SNAP service, causing denial of service of the storage service to the host.
CVE-2025-33215
Medium · 6.8
CWE-823 Mar 24, 2026
Use of Out-of-range Pointer Offset in NVIDIA SNAP-4 Container
NVIDIA SNAP-4 Container contains a vulnerability in the VIRTIO-BLK component where a malicious guest VM may cause use of out-of-range pointer offset by sending crafted messages. A successful exploit of this vulnerability may lead to a denial of service of the DPA and impact the availability of storage to other VMs.
CVE-2026-24241
High · 7.5
CWE-287 Feb 24, 2026
Improper Authentication in NVIDIA Delegated License Service
NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentication issue. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2025-33181
High · 8.8
CWE-77 Feb 24, 2026
Command Injection in NVIDIA Cumulus Linux
NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability might lead to escalation of privileges.
CVE-2025-33180
High · 8.8
CWE-77 Feb 24, 2026
Command Injection in NVIDIA Cumulus Linux
NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability might lead to escalation of privileges.
CVE-2025-33179
High · 8.8
CWE-266 Feb 24, 2026
NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface…
NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could run an unauthorized command. A successful exploit of this vulnerability might lead to escalation of privileges.
CVE-2025-33253
High · 7.3
CWE-502 Feb 18, 2026
Deserialization of Untrusted Data in NVIDIA Nemo
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
CVE-2025-33252
High · 7.8
CWE-502 Feb 18, 2026
Deserialization of Untrusted Data in NVIDIA Nemo
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
CVE-2025-33251
High · 7.8
CWE-94 Feb 18, 2026
Code Injection in NVIDIA Nemo
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
CVE-2025-33250
High · 7.8
CWE-94 Feb 18, 2026
Code Injection in NVIDIA Nemo
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
CVE-2025-33249
High · 7.8
CWE-77 Feb 18, 2026
Command Injection in NVIDIA Nemo
NVIDIA NeMo Framework for all platforms contains a vulnerability in a voice-preprocessing script, where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2025-33246
High · 7.8
CWE-77 Feb 18, 2026
Command Injection in NVIDIA Nemo
NVIDIA NeMo Framework for all platforms contains a vulnerability in the ASR Evaluator utility, where a user could cause a command injection by supplying crafted input to a configuration parameter. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, or information disclosure.
CVE-2025-33245
High · 8.8
CWE-502 Feb 18, 2026
Deserialization of Untrusted Data in NVIDIA Nemo
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2025-33243
High · 7.8
CWE-502 Feb 18, 2026
Deserialization of Untrusted Data in NVIDIA Nemo
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution in distributed environments. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2025-33241
High · 7.8
CWE-502 Feb 18, 2026
Deserialization of Untrusted Data in NVIDIA Nemo
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by loading a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2025-33240
High · 7.8
CWE-94 Feb 18, 2026
Code Injection in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability in a data shuffling tutorial, where malicious input could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2025-33239
High · 7.8
CWE-94 Feb 18, 2026
Code Injection in NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability in a data merging tutorial, where malicious input could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2025-33236
High · 7.8
CWE-94 Feb 18, 2026
Code Injection in NVIDIA Nemo
NVIDIA NeMo Framework contains a vulnerability where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2026-24149
High · 7.8
CWE-94 Feb 3, 2026
Code Injection in NVIDIA Megatron-lm
NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, data tampering.
CVE-2025-33237
Medium · 5.5
CWE-476 Jan 28, 2026
NULL Pointer Dereference in NVIDIA GeForce
NVIDIA HD Audio Driver for Windows contains a vulnerability where an attacker could exploit a NULL pointer dereference issue. A successful exploit of this vulnerability might lead to a denial of service.
CVE-2025-33220
High · 7.8
CWE-416 Jan 28, 2026
Use After Free in NVIDIA GeForce
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is freed. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.
CVE-2025-33219
High · 7.8
CWE-190 Jan 28, 2026
Integer Overflow or Wraparound in NVIDIA GeForce
NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an integer overflow or wraparound. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.