Vulnerabilidades de NVIDIA

CVE-2025-23345 Média · 4.4 CWE-125 23/10/2025

Out-of-bounds Read em NVIDIA GeForce

NVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an attacker might cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure or denial of service.

CVE-2025-23352 Alta · 7.8 CWE-824 23/10/2025

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a…

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVE-2025-23332 Média · 5.0 CWE-476 23/10/2025

NULL Pointer Dereference em NVIDIA Virtual GPU Manager

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker might be able to trigger a null pointer deference. A successful exploit of this vulnerability might lead to denial of service.

CVE-2025-23330 Média · 5.5 CWE-476 23/10/2025

NULL Pointer Dereference em NVIDIA GeForce

NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.

CVE-2025-23300 Média · 5.5 CWE-476 23/10/2025

NULL Pointer Dereference em NVIDIA Virtual GPU Manager

NVIDIA Display Driver for Linux contains a vulnerability in the kernel driver, where a user could cause a null pointer dereference by allocating a specific memory resource. A successful exploit of this vulnerability might lead to denial of service.

CVE-2025-23299 Média · 6.7 CWE-787 22/10/2025

Out-of-bounds Write em NVIDIA BlueField GA

NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code.

CVE-2025-33177 Média · 5.5 CWE-400 14/10/2025

Uncontrolled Resource Consumption em NVIDIA Jetson Orin Series

NVIDIA Jetson Linux and IGX OS contain a vulnerability in NvMap, where improper tracking of memory allocations could allow a local attacker to cause memory overallocation. A successful exploitation of this vulnerability might lead to denial of service.

CVE-2025-33182 Alta · 7.6 CWE-862 14/10/2025

Missing Authorization em NVIDIA Jetson Orin Series

NVIDIA Jetson Linux contains a vulnerability in UEFI, where improper authentication may allow a privileged user to cause corruption of the Linux Device Tree. A successful exploitation of this vulnerability might lead to data tampering, denial of service.

CVE-2025-23356 Alta · 8.4 CWE-306 14/10/2025

Missing Authentication for Critical Function em NVIDIA Isaac Lab

NVIDIA Isaac Lab contains a vulnerability in SB3 configuration parsing. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

CVE-2025-23355 Alta · 7.8 CWE-427 01/10/2025

Uncontrolled Search Path Element em NVIDIA Nsight Graphics

NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and denial of service.

CVE-2025-23297 Alta · 7.8 CWE-276 01/10/2025

Incorrect Default Permissions em NVIDIA NVIDIA App

NVIDIA Installer for NvAPP for Windows contains a vulnerability in the FrameviewSDK installation process, where an attacker with local unprivileged access could modify files in the Frameview SDK directory. A successful exploit of this vulnerability might lead to escalation of privileges.