nvidia Vulnerability Advisory Catalog

Total 777 security vulnerabilities recorded for nvidia software and firmware.

← Back to All Vendors
Component: gpu_display_driver

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, whic...

📅 2023-07-04
CVSS 7.1 Dossier →
Component: jetson_linux

NVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged local attacker can configure invalid settings, resultin...

📅 2023-06-23
CVSS 4.4 Dossier →
Component: jetson_linux

NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical ac...

📅 2023-06-23
CVSS 7.1 Dossier →
Component: gpu_display_driver

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code executio...

📅 2023-06-23
CVSS 7.8 Dossier →
Component: cuda_toolkit

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user ...

📅 2023-04-22
CVSS 5.3 Dossier →
Component: cuda_toolkit

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user ...

📅 2023-04-22
CVSS 5.3 Dossier →
Component: cuda_toolkit

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read by running c...

📅 2023-04-22
CVSS 5.3 Dossier →
Component: cuda_toolkit

NVIDIA CUDA Toolkit for Linux and Windows contains a vulnerability in cuobjdump, where a division-by-zero error may enable a user to cause a crash, wh...

📅 2023-04-22
CVSS 3.3 Dossier →
Component: cuda_toolkit

NVIDIA CUDA Toolkit SDK for Linux and Windows contains a NULL pointer dereference in cuobjdump, where a local user running the tool against a malforme...

📅 2023-04-22
CVSS 3.3 Dossier →
Component: sbios

NVIDIA DGX-1 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, and escalation of privileges....

📅 2023-04-22
CVSS 6.0 Dossier →
Component: bmc

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authorization can upload and download a...

📅 2023-04-22
CVSS 6.7 Dossier →
Component: bmc

NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shel...

📅 2023-04-22
CVSS 7.2 Dossier →
Component: sbios

NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access b...

📅 2023-04-22
CVSS 7.5 Dossier →
Component: bmc

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization c...

📅 2023-04-22
CVSS 7.8 Dossier →
Component: sbios

NVIDIA DGX-1 SBIOS contains a vulnerability in the Uncore PEI module, where authentication of the code executed by SSA is missing, which may lead to a...

📅 2023-04-22
CVSS 8.2 Dossier →
Component: sbios

NVIDIA DGX-2 SBIOS contains a vulnerability where an attacker may modify the ServerSetup NVRAM variable at runtime by executing privileged code. A suc...

📅 2023-04-22
CVSS 7.5 Dossier →
Component: dgx_a100_firmware

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the NVME SMM API. A successful exp...

📅 2023-04-22
CVSS 7.5 Dossier →
CVE-2023-0205 MEDIUM
Component: connectx_firmware

NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granu...

📅 2023-04-22
CVSS 5.0 Dossier →
CVE-2023-0204 MEDIUM
Component: connectx_firmware

NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can cause improper handling of...

📅 2023-04-22
CVSS 6.5 Dossier →
CVE-2023-0203 MEDIUM
Component: connectx_firmware

NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granu...

📅 2023-04-22
CVSS 5.0 Dossier →
Component: dgx_a100_firmware

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the GenericSio and LegacySmmSredir...

📅 2023-04-22
CVSS 7.5 Dossier →
CVE-2023-0201 MEDIUM
Component: bmc

NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, wh...

📅 2023-04-22
CVSS 6.7 Dossier →
Component: bmc

NVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffers end, w...

📅 2023-04-22
CVSS 7.5 Dossier →
CVE-2023-0199 MEDIUM
Component: gpu_display_driver

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds write can lead to de...

📅 2023-04-22
CVSS 6.1 Dossier →
Page 13 of 33 (777 Total Records)