Nvidia vulnerabilities
1,179 CVEs and advisories name Nvidia as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-47473NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition.
- CVE-2026-47471NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could cause a heap based buffer o
- CVE-2026-47472NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could ca
- CVE-2026-24233NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, una
- CVE-2026-47482NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective life
- CVE-2026-47481NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternativ
- CVE-2026-47480NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exception.
- CVE-2026-47479NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption.
- CVE-2026-47478NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an expired file descriptor.
- CVE-2026-47477NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based buffer overflow.
- CVE-2026-47476NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption.
- CVE-2026-24270NVIDIA AIStore framework contains a vulnerability where an attacker could bypass authentication.
- CVE-2026-24266NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a use-after-free issue.
- CVE-2026-24264NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause improper handling of highly compressed data.
- CVE-2026-24251NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resourc
- CVE-2026-24250NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper validation of allowed inputs.
- CVE-2026-24249NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data.
- CVE-2026-24248NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of code generation.
- CVE-2026-24247NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data.
- CVE-2026-24246NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically managed code resourc
- CVE-2026-24245NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data.
- CVE-2026-24244NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data.
- CVE-2026-24243NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data.
- CVE-2026-24242NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side request forgery.
- CVE-2026-24240NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data.
- CVE-2025-23351NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may caus
- CVE-2025-23350NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may caus
- CVE-2026-24260NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use race condition.
- CVE-2026-24228NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data.
- CVE-2026-24155NVIDIA NeMo Framework for all platforms contains a code injection vulnerability.