Vulnerabilidades de NVIDIA
CVEs publicadas que afetam produtos de NVIDIA: 436 registro(s), com severidade, exploração e correções.
GeForce 120Tesla 119NVIDIA RTX, Quadro, NVS 116Virtual GPU Manager 67Guest driver 63Megatron-Bridge 43Nemo Megatron Bridge 43Triton Inference Server 36Nemo 21NeMo Framework 21DGX Spark 20Tensorrt Llm 16Dynamo 15Dgx Os 15Nemoclaw 14Infra Controller 14Infrastructure Controller 14Gpu Display Driver 12Megatron-lm 10AIStore framework 9DALI 7Openshell 6Tensorrt 6Unified Fabric Manager Enterprise - LTS 2023 5Unified Fabric Manager Enterprise - LTS 2024 5Unified Fabric Manager Enterprise - LTS 2025 5Nemo Speech 5Dgx Spark Uefi 5Cumulus Linux GA 5Unified Fabric Manager Enterprise - GA 5Cumulus Linux 5Cumulus Linux LTS 4RTX PRO, RTX, Quadro 4Nvos 4ConnectX LTS24 4BlueField GA 4Bionemo Framework 4Cuda Toolkit 4BlueField LTS23 4BlueField LTS24 4
CVE-2026-24245
Alta · 7.8
CWE-502 01/07/2026
Deserialization of Untrusted Data em NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24244
Alta · 7.8
CWE-502 01/07/2026
Deserialization of Untrusted Data em NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24243
Alta · 7.8
CWE-502 01/07/2026
Deserialization of Untrusted Data em NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24242
Alta · 7.8
CWE-918 01/07/2026
Server-Side Request Forgery (SSRF) em NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2026-24240
Alta · 7.8
CWE-502 01/07/2026
Deserialization of Untrusted Data em NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2025-23351
Crítica · 9.0
CWE-787 01/07/2026
Out-of-bounds Write em NVIDIA BlueField GA
NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.
CVE-2025-23350
Crítica · 9.0
CWE-787 01/07/2026
Out-of-bounds Write em NVIDIA BlueField GA
NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device.
CVE-2026-24228
Alta · 7.8
CWE-502 16/06/2026
Deserialization of Untrusted Data em NVIDIA Nemo
NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24155
Alta · 7.8
CWE-94 16/06/2026
Code Injection em NVIDIA Nemo
NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2026-24181
Alta · 7.3
CWE-129 09/06/2026
NVIDIA DALI contains a vulnerability in a component where an attacker could cause an…
NVIDIA DALI contains a vulnerability in a component where an attacker could cause an improper index validation. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.
CVE-2026-24180
Alta · 7.3
CWE-122 09/06/2026
Heap-based Buffer Overflow em NVIDIA Data Loading Library
NVIDIA DALI contains a vulnerability in a component where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.
CVE-2026-24237
Alta · 7.8
CWE-502 02/06/2026
Deserialization of Untrusted Data em NVIDIA Nvtabular
NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-24221
Alta · 7.8
CWE-502 02/06/2026
Deserialization of Untrusted Data em NVIDIA Nvtabular
NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering and information disclosure.
CVE-2026-24201
Média · 5.8
CWE-787 26/05/2026
Out-of-bounds Write em NVIDIA Virtual GPU Manager
NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause an out-of-bound access. A successful exploit of this vulnerability might lead to data tampering, denial of service, or information disclosure.
CVE-2026-24200
Alta · 7.0
CWE-416 26/05/2026
Use After Free em NVIDIA Virtual GPU Manager
NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free for stack memory. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
CVE-2026-24199
Média · 4.7
CWE-362 26/05/2026
Race Condition em NVIDIA Gpu Display Driver
NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24198
Média · 5.6
CWE-200 26/05/2026
Exposure of Sensitive Information em NVIDIA GeForce
NVIDIA GPU Display Driver for Linux contains a vulnerability where an advanced attacker could use a race condition to leak sensitive memory, which might cause limited exposure of sensitive information to an unauthorized actor. A successful exploit of this vulnerability might lead to denial of service, data tampering, and information disclosure.
CVE-2026-24197
Média · 6.5
CWE-1188 26/05/2026
Insecure Default Initialization of Resource em NVIDIA Gpu Display Driver
NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24196
Alta · 7.1
CWE-125 26/05/2026
Out-of-bounds Read em NVIDIA Gpu Display Driver
NVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to denial of service and information disclosure.
CVE-2026-24195
Média · 5.5
CWE-20 26/05/2026
Improper Input Validation em NVIDIA Gpu Display Driver
NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24194
Alta · 7.8
CWE-281 26/05/2026
NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler…
NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission handling. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
CVE-2026-24193
Alta · 7.8
CWE-787 26/05/2026
Out-of-bounds Write em NVIDIA Gpu Display Driver
NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
CVE-2026-24192
Alta · 7.8
CWE-681 26/05/2026
NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause…
NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between numeric types, leading to a heap buffer overflow. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
CVE-2026-24191
Alta · 7.8
CWE-367 26/05/2026
TOCTOU Race Condition em NVIDIA Gpu Display Driver
NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.
CVE-2026-24190
Alta · 7.8
CWE-862 26/05/2026
Missing Authorization em NVIDIA Gpu Display Driver
NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GPU resources. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.