Vulnerabilidades de NVIDIA
CVEs publicadas que afetam produtos de NVIDIA: 436 registro(s), com severidade, exploração e correções.
GeForce 120Tesla 119NVIDIA RTX, Quadro, NVS 116Virtual GPU Manager 67Guest driver 63Megatron-Bridge 43Nemo Megatron Bridge 43Triton Inference Server 36Nemo 21NeMo Framework 21DGX Spark 20Tensorrt Llm 16Dynamo 15Dgx Os 15Nemoclaw 14Infra Controller 14Infrastructure Controller 14Gpu Display Driver 12Megatron-lm 10AIStore framework 9DALI 7Openshell 6Tensorrt 6Unified Fabric Manager Enterprise - LTS 2023 5Unified Fabric Manager Enterprise - LTS 2024 5Unified Fabric Manager Enterprise - LTS 2025 5Nemo Speech 5Dgx Spark Uefi 5Cumulus Linux GA 5Unified Fabric Manager Enterprise - GA 5Cumulus Linux 5Cumulus Linux LTS 4RTX PRO, RTX, Quadro 4Nvos 4ConnectX LTS24 4BlueField GA 4Bionemo Framework 4Cuda Toolkit 4BlueField LTS23 4BlueField LTS24 4
CVE-2025-33244
Crítica · 9.0
CWE-502 24/03/2026
Deserialization of Untrusted Data em NVIDIA Apex
NVIDIA APEX for Linux contains a vulnerability where an unauthorized attacker could cause a deserialization of untrusted data. This vulnerability affects environments that use PyTorch versions earlier than 2.6. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, data tampering, and information disclosure.
CVE-2025-33242
Média · 5.9
CWE-1234 24/03/2026
NVIDIA B300 MCU contains a vulnerability in the CX8 MCU that could allow a malicious…
NVIDIA B300 MCU contains a vulnerability in the CX8 MCU that could allow a malicious actor to modify unsupported registries, causing a bad state. A successful exploit of this vulnerability might lead to denial of service and data tampering.
CVE-2025-33238
Alta · 7.5
CWE-362 24/03/2026
Race Condition em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server Sagemaker HTTP server contains a vulnerability where an attacker may cause an exception. A successful exploit of this vulnerability may lead to denial of service.
CVE-2025-33216
Média · 6.8
CWE-131 24/03/2026
NVIDIA SNAP-4 Container contains a vulnerability in the configuration interface where an…
NVIDIA SNAP-4 Container contains a vulnerability in the configuration interface where an attacker on a VM may cause an incorrect calculation of buffer size by sending crafted configurations. A successful exploit of this vulnerability may lead to crash of the SNAP service, causing denial of service of the storage service to the host.
CVE-2025-33215
Média · 6.8
CWE-823 24/03/2026
Use of Out-of-range Pointer Offset em NVIDIA SNAP-4 Container
NVIDIA SNAP-4 Container contains a vulnerability in the VIRTIO-BLK component where a malicious guest VM may cause use of out-of-range pointer offset by sending crafted messages. A successful exploit of this vulnerability may lead to a denial of service of the DPA and impact the availability of storage to other VMs.
CVE-2026-24241
Alta · 7.5
CWE-287 24/02/2026
Improper Authentication em NVIDIA Delegated License Service
NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentication issue. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2025-33181
Alta · 8.8
CWE-77 24/02/2026
Command Injection em NVIDIA Cumulus Linux
NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability might lead to escalation of privileges.
CVE-2025-33180
Alta · 8.8
CWE-77 24/02/2026
Command Injection em NVIDIA Cumulus Linux
NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability might lead to escalation of privileges.
CVE-2025-33179
Alta · 8.8
CWE-266 24/02/2026
NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface…
NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could run an unauthorized command. A successful exploit of this vulnerability might lead to escalation of privileges.
CVE-2025-33253
Alta · 7.3
CWE-502 18/02/2026
Deserialization of Untrusted Data em NVIDIA Nemo
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
CVE-2025-33252
Alta · 7.8
CWE-502 18/02/2026
Deserialization of Untrusted Data em NVIDIA Nemo
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
CVE-2025-33251
Alta · 7.8
CWE-94 18/02/2026
Code Injection em NVIDIA Nemo
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
CVE-2025-33250
Alta · 7.8
CWE-94 18/02/2026
Code Injection em NVIDIA Nemo
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
CVE-2025-33249
Alta · 7.8
CWE-77 18/02/2026
Command Injection em NVIDIA Nemo
NVIDIA NeMo Framework for all platforms contains a vulnerability in a voice-preprocessing script, where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2025-33246
Alta · 7.8
CWE-77 18/02/2026
Command Injection em NVIDIA Nemo
NVIDIA NeMo Framework for all platforms contains a vulnerability in the ASR Evaluator utility, where a user could cause a command injection by supplying crafted input to a configuration parameter. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, or information disclosure.
CVE-2025-33245
Alta · 8.8
CWE-502 18/02/2026
Deserialization of Untrusted Data em NVIDIA Nemo
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2025-33243
Alta · 7.8
CWE-502 18/02/2026
Deserialization of Untrusted Data em NVIDIA Nemo
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution in distributed environments. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2025-33241
Alta · 7.8
CWE-502 18/02/2026
Deserialization of Untrusted Data em NVIDIA Nemo
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by loading a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2025-33240
Alta · 7.8
CWE-94 18/02/2026
Code Injection em NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability in a data shuffling tutorial, where malicious input could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2025-33239
Alta · 7.8
CWE-94 18/02/2026
Code Injection em NVIDIA Nemo Megatron Bridge
NVIDIA Megatron Bridge contains a vulnerability in a data merging tutorial, where malicious input could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2025-33236
Alta · 7.8
CWE-94 18/02/2026
Code Injection em NVIDIA Nemo
NVIDIA NeMo Framework contains a vulnerability where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2026-24149
Alta · 7.8
CWE-94 03/02/2026
Code Injection em NVIDIA Megatron-lm
NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, data tampering.
CVE-2025-33237
Média · 5.5
CWE-476 28/01/2026
NULL Pointer Dereference em NVIDIA GeForce
NVIDIA HD Audio Driver for Windows contains a vulnerability where an attacker could exploit a NULL pointer dereference issue. A successful exploit of this vulnerability might lead to a denial of service.
CVE-2025-33220
Alta · 7.8
CWE-416 28/01/2026
Use After Free em NVIDIA GeForce
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is freed. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.
CVE-2025-33219
Alta · 7.8
CWE-190 28/01/2026
Integer Overflow or Wraparound em NVIDIA GeForce
NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an integer overflow or wraparound. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.