Nvidia vulnerabilities
1,179 CVEs and advisories name Nvidia as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-33196NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused.
- CVE-2025-33195NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause unexpected memory buffer operations.
- CVE-2025-33194NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper processing of input data.
- CVE-2025-33193NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper validation of integrity.
- CVE-2025-33192NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read.
- CVE-2025-33191NVIDIA DGX Spark GB10 contains a vulnerability in OSROOT firmware, where an attacker could cause an invalid memory read.
- CVE-2025-33190NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware where an attacker could cause an out-of-bound write.
- CVE-2025-33189NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an out-of-bound write.
- CVE-2025-33188NVIDIA DGX Spark GB10 contains a vulnerability in hardware resources where an attacker could tamper with hardware controls.
- CVE-2025-33187NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas
- CVE-2025-33184NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue.
- CVE-2025-33183NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue.
- CVE-2025-33186NVIDIA AIStore contains a vulnerability in AuthN.
- CVE-2025-33185NVIDIA AIStore contains a vulnerability in AuthN where an unauthenticated user may cause information disclosure.
- CVE-2025-33202NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extr
- CVE-2025-33178NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker
- CVE-2025-23361NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause imprope
- CVE-2025-23357NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code inje
- CVE-2025-23358NVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path element issue.
- CVE-2025-33176NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an improper restriction of communications channels on an ad
- CVE-2025-23352NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access.
- CVE-2025-23347NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions.
- CVE-2025-23345NVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an attacker might cause an out-of-bounds read
- CVE-2025-23332NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker might be able to trigger a null pointer defer
- CVE-2025-23330NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference.
- CVE-2025-23300NVIDIA Display Driver for Linux contains a vulnerability in the kernel driver, where a user could cause a null pointer dereference by alloca
- CVE-2025-23299NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege acc
- CVE-2025-33177NVIDIA Jetson Linux and IGX OS contain a vulnerability in NvMap, where improper tracking of memory allocations could allow a local attacker
- CVE-2025-33182NVIDIA Jetson Linux contains a vulnerability in UEFI, where improper authentication may allow a privileged user to cause corruption of the L
- CVE-2025-23356NVIDIA Isaac Lab contains a vulnerability in SB3 configuration parsing.