nvidia Vulnerability Advisory Catalog

Total 777 security vulnerabilities recorded for nvidia software and firmware.

← Back to All Vendors
Component: dgx_a100_firmware

NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high privileges can chain another vulnerability to this vulnerabil...

📅 2022-07-04
CVSS 7.5 Dossier →
Component: dgx_a100_firmware

NVIDIA DGX A100 contains a vulnerability in SBIOS in the Ofbd, where a local user with elevated privileges can cause access to an uninitialized pointe...

📅 2022-07-04
CVSS 8.2 Dossier →
Component: dgx_a100_firmware

NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended b...

📅 2022-07-02
CVSS 8.2 Dossier →
CVE-2022-31605 CRITICAL
Component: nvflare

NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load() instead of yaml.safe_load(...

📅 2022-07-01
CVSS 9.8 Dossier →
CVE-2022-31604 CRITICAL
Component: nvflare

NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation module, where The CA credentials are transported via pickle and n...

📅 2022-07-01
CVSS 9.8 Dossier →
Component: virtual_gpu

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where it may lead to a use-after-free, which in turn may cause d...

📅 2022-05-17
CVSS 4.1 Dossier →
Component: virtual_gpu

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where uncontrolled resource consumption can be triggered by an u...

📅 2022-05-17
CVSS 5.5 Dossier →
Component: gpu_display_driver

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where improper input...

📅 2022-05-17
CVSS 5.5 Dossier →
Component: gpu_display_driver

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a NULL pointer...

📅 2022-05-17
CVSS 5.5 Dossier →
Component: gpu_display_driver

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where the product re...

📅 2022-05-17
CVSS 5.5 Dossier →
Component: gpu_display_driver

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where the memory management software does not ...

📅 2022-05-17
CVSS 5.5 Dossier →
Component: gpu_display_driver

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where the product re...

📅 2022-05-17
CVSS 6.1 Dossier →
Component: virtual_gpu

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the ECC layer, where an unprivileged regular user can cause an out-of-boun...

📅 2022-05-17
CVSS 6.8 Dossier →
Component: gpu_display_driver

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an u...

📅 2022-05-17
CVSS 7.1 Dossier →
Component: gpu_display_driver

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause an out...

📅 2022-05-17
CVSS 7.7 Dossier →
Component: gpu_display_driver

NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where an unauthorized attacker on t...

📅 2022-05-17
CVSS 8.5 Dossier →
Component: virtual_gpu

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network c...

📅 2022-05-17
CVSS 8.5 Dossier →
Component: omniverse_cache

NVIDIA Omniverse Nucleus and Cache contain a vulnerability in its configuration of OpenSSL, where an attacker with physical access to the system can c...

📅 2022-04-29
CVSS 6.6 Dossier →
Component: jetson_linux

NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_mount function, where Insufficient validation of untrusted data may allo...

📅 2022-04-27
CVSS 5.0 Dossier →
Component: jetson_linux

NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function, where insufficient validation of untrusted data may...

📅 2022-04-27
CVSS 4.6 Dossier →
Component: jetson_linux

NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_read_file function, where insufficient validation of untrusted data may ...

📅 2022-04-27
CVSS 5.7 Dossier →
Component: jetson_linux

NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where, if TFTP is enabled, a local attacker with elevat...

📅 2022-04-27
CVSS 7.3 Dossier →
Component: jetson_linux

NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where insufficient validation of untrusted data may all...

📅 2022-04-27
CVSS 5.6 Dossier →
Component: cuda_toolkit

NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local...

📅 2022-03-29
CVSS 7.8 Dossier →
Page 18 of 33 (777 Total Records)