nvidia Vulnerability Advisory Catalog

Total 777 security vulnerabilities recorded for nvidia software and firmware.

← Back to All Vendors
Component: dgx_os

NVIDIA DGX Spark GB10 contains a vulnerability in OSROOT firmware, where an attacker could cause an invalid memory read. A successful exploit of this ...

📅 2025-11-25
CVSS 5.7 Dossier →
Component: dgx_os

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware where an attacker could cause an out-of-bound write. A successful exploit of this vul...

📅 2025-11-25
CVSS 6.7 Dossier →
Component: dgx_os

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an out-of-bound write. A successful exploit of this vu...

📅 2025-11-25
CVSS 7.8 Dossier →
Component: dgx_os

NVIDIA DGX Spark GB10 contains a vulnerability in hardware resources where an attacker could tamper with hardware controls. A successful exploit of th...

📅 2025-11-25
CVSS 8.0 Dossier →
CVE-2025-33187 CRITICAL
Component: dgx_os

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas. A succes...

📅 2025-11-25
CVSS 9.3 Dossier →
Component: triton_inference_server

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extra-large pa...

📅 2025-11-11
CVSS 6.5 Dossier →
Component: nemo

NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause ...

📅 2025-11-11
CVSS 7.8 Dossier →
Component: nemo

NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control ...

📅 2025-11-11
CVSS 7.8 Dossier →
Component: nsight_graphics

NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. A successful...

📅 2025-10-01
CVSS 6.7 Dossier →
Component: megatron-lm

NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensemble_classifer script where malicious data created by an attacker may cause a...

📅 2025-09-24
CVSS 7.8 Dossier →
Component: megatron-lm

NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker may cause a...

📅 2025-09-24
CVSS 7.8 Dossier →
Component: megatron-lm

NVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq.py component, where an attacker may cause a code injec...

📅 2025-09-24
CVSS 7.8 Dossier →
Component: megatron-lm

NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may cause a code...

📅 2025-09-24
CVSS 7.8 Dossier →
Component: cuda_toolkit

NVIDIA CUDA Toolkit contains a vulnerability in cuobjdump, where an unprivileged user can cause a NULL pointer dereference. A successful exploit of t...

📅 2025-09-24
CVSS 3.3 Dossier →
Component: cuda_toolkit

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malfor...

📅 2025-09-24
CVSS 3.3 Dossier →
Component: cuda_toolkit

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the u...

📅 2025-09-24
CVSS 3.3 Dossier →
Component: cuda_toolkit

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where a user may cause an out-of-bounds write by running nvdisasm on a mali...

📅 2025-09-24
CVSS 3.3 Dossier →
Component: cuda_toolkit

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buffer overflow by getting the use...

📅 2025-09-24
CVSS 3.3 Dossier →
Component: cuda_toolkit

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a GPU out-of-bounds write by provi...

📅 2025-09-24
CVSS 4.2 Dossier →
Component: cuda_toolkit

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a divide by zero error by submitti...

📅 2025-09-24
CVSS 2.5 Dossier →
Component: cuda_toolkit

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malfor...

📅 2025-09-24
CVSS 3.3 Dossier →
Component: cuda_toolkit

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary where a user may cause an out-of-bounds read by passing a malfo...

📅 2025-09-24
CVSS 3.3 Dossier →
Component: cuda_toolkit

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malfor...

📅 2025-09-24
CVSS 3.3 Dossier →
Component: triton_inference_server

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause a denial of service by loading a misconfig...

📅 2025-09-17
CVSS 4.4 Dossier →
Page 6 of 33 (777 Total Records)