Vulnerabilidades de NVIDIA
CVEs publicadas que afetam produtos de NVIDIA: 320 registro(s), com severidade, exploração e correções.
Nemo Megatron Bridge 43Megatron-Bridge 43Triton Inference Server 36GeForce 22Nemo 21NeMo Framework 21Tesla 21DGX Spark 20NVIDIA RTX, Quadro, NVS 18Tensorrt Llm 16Dgx Os 15Dynamo 15Infra Controller 14Nemoclaw 14Guest driver 14Virtual GPU Manager 13Gpu Display Driver 12Megatron-lm 10AIStore framework 9DALI 7Openshell 6Tensorrt 6Cumulus Linux GA 5Cumulus Linux 5Dgx Spark Uefi 5Nemo Speech 5Unified Fabric Manager Enterprise - LTS 2024 4Unified Fabric Manager Enterprise - LTS 2023 4BlueField LTS24 4Cumulus Linux LTS 4RTX PRO, RTX, Quadro 4Unified Fabric Manager Enterprise - LTS 2025 4BlueField GA 4BlueField LTS23 4ConnectX GA 4ConnectX LTS23 4ConnectX LTS24 4Unified Fabric Manager Enterprise - GA 4Nvos 4Cuda Toolkit 4
CVE-2026-24232
Média · 4.3
CWE-502 21/07/2026
Deserialization of Untrusted Data em NVIDIA Tranformers4Rec
NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-47475
Média · 6.2
CWE-617 14/07/2026
NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API…
NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a reachable assertion in the sampler thread. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-47473
Alta · 7.4
CWE-123 14/07/2026
NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a…
NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure.
CVE-2026-47472
Alta · 7.8
CWE-502 14/07/2026
Deserialization of Untrusted Data em NVIDIA Tensorrt Llm
NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.
CVE-2026-47471
Alta · 7.5
CWE-122 14/07/2026
Heap-based Buffer Overflow em NVIDIA Tensorrt Llm
NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could cause a heap based buffer overflow. A successful exploit of this vulnerability might lead to information disclosure, data tampering, or denial of service.
CVE-2026-47470
Média · 6.2
CWE-20 14/07/2026
Improper Input Validation em NVIDIA Tensorrt Llm
NVIDIA TensorRT-LLM for any platform contains a vulnerability in the gRPC server chat API endpoint, where an attacker could cause CWE-20 by local attack. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24272
Alta · 7.8
CWE-122 14/07/2026
Heap-based Buffer Overflow em NVIDIA Tensorrt
NVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap-based buffer. A successful exploit of this vulnerability might lead to code execution.
CVE-2026-24271
Média · 6.2
CWE-770 14/07/2026
Allocation of Resources Without Limits or Throttling em NVIDIA Tensorrt Llm
NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause allocation of GPU resources without limits or throttling. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24268
Alta · 7.8
CWE-122 14/07/2026
Heap-based Buffer Overflow em NVIDIA Tensorrt
NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution.
CVE-2026-24259
Média · 6.4
CWE-306 14/07/2026
Missing Authentication for Critical Function em NVIDIA Tensorrt Llm
NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-24238
Alta · 7.8
CWE-129 14/07/2026
NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper…
NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index. A successful exploit of this vulnerability might lead to code execution.
CVE-2026-24234
Média · 6.8
CWE-918 14/07/2026
Server-Side Request Forgery (SSRF) em NVIDIA Tensorrt Llm
NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal media fetching functions, where a network-accessible attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to denial of service and information disclosure.
CVE-2026-24233
Alta · 8.4
CWE-502 14/07/2026
Deserialization of Untrusted Data em NVIDIA Tensorrt Llm
NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.
CVE-2026-24229
Alta · 7.3
CWE-306 14/07/2026
Missing Authentication for Critical Function em NVIDIA Tensorrt Llm
NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by sending requests to the FastAPI server. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service.
CVE-2026-24227
Crítica · 9.8
CWE-502 14/07/2026
Deserialization of Untrusted Data em NVIDIA Tensorrt
NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution.
CVE-2026-24226
Média · 6.3
CWE-829 14/07/2026
NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause…
NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
CVE-2026-24220
Média · 6.4
CWE-502 14/07/2026
Deserialization of Untrusted Data em NVIDIA Tensorrt Llm
NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution.
CVE-2026-47482
Alta · 7.5
CWE-401 14/07/2026
Missing Release of Memory after Effective Lifetime em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifetime. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-47481
Média · 6.5
CWE-288 14/07/2026
Authentication Bypass Using an Alternate Path or Channel em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternative path or channel. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVE-2026-47480
Alta · 7.5
CWE-248 14/07/2026
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can…
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exception. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-47479
Alta · 7.5
CWE-400 14/07/2026
Uncontrolled Resource Consumption em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-47478
Alta · 7.5
CWE-910 14/07/2026
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can…
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an expired file descriptor. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-47477
Alta · 7.5
CWE-121 14/07/2026
Stack-based Buffer Overflow em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-47476
Alta · 7.5
CWE-400 14/07/2026
Uncontrolled Resource Consumption em NVIDIA Triton Inference Server
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.
CVE-2026-24270
Crítica · 9.8
CWE-290 01/07/2026
Authentication Bypass by Spoofing em NVIDIA AIStore framework
NVIDIA AIStore framework contains a vulnerability where an attacker could bypass authentication. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering.