Nvidia vulnerabilities
1,179 CVEs and advisories name Nvidia as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-33254NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause internal state corruption.
- CVE-2025-33238NVIDIA Triton Inference Server Sagemaker HTTP server contains a vulnerability where an attacker may cause an exception.
- CVE-2025-33244NVIDIA APEX for Linux contains a vulnerability where an unauthorized attacker could cause a deserialization of untrusted data.
- CVE-2026-24152NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciou
- CVE-2026-24151NVIDIA Megatron-LM contains a vulnerability in inferencing where an Attacker may cause an RCE by convincing a user to load a maliciously cra
- CVE-2026-24150NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciou
- CVE-2025-33248NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convincing a user to load
- CVE-2025-33247NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution.
- CVE-2025-33242NVIDIA B300 MCU contains a vulnerability in the CX8 MCU that could allow a malicious actor to modify unsupported registries, causing a bad s
- CVE-2025-33216NVIDIA SNAP-4 Container contains a vulnerability in the configuration interface where an attacker on a VM may cause an incorrect calculation
- CVE-2025-33215NVIDIA SNAP-4 Container contains a vulnerability in the VIRTIO-BLK component where a malicious guest VM may cause use of out-of-range pointe
- CVE-2026-24241NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authenti
- CVE-2025-33181NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command.
- CVE-2025-33180NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command.
- CVE-2025-33179NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could run an unauthorized
- CVE-2025-33240NVIDIA Megatron Bridge contains a vulnerability in a data shuffling tutorial, where malicious input could cause a code injection.
- CVE-2025-33239NVIDIA Megatron Bridge contains a vulnerability in a data merging tutorial, where malicious input could cause a code injection.
- CVE-2025-33253NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciousl
- CVE-2025-33252NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution.
- CVE-2025-33251NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution.
- CVE-2025-33250NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution.
- CVE-2025-33249NVIDIA NeMo Framework for all platforms contains a vulnerability in a voice-preprocessing script, where malicious input created by an attack
- CVE-2025-33246NVIDIA NeMo Framework for all platforms contains a vulnerability in the ASR Evaluator utility, where a user could cause a command injection
- CVE-2025-33245NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution.
- CVE-2025-33243NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution in distributed environments.
- CVE-2025-33241NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by loading a maliciously crafted file.
- CVE-2025-33236NVIDIA NeMo Framework contains a vulnerability where malicious data created by an attacker could cause code injection.
- CVE-2026-24149NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code inje
- CVE-2025-33237NVIDIA HD Audio Driver for Windows contains a vulnerability where an attacker could exploit a NULL pointer dereference issue.
- CVE-2025-33220NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the m