Nvidia vulnerabilities
1,179 CVEs and advisories name Nvidia as an affected vendor, newest first. Follow it as a feed.
- CVE-2021-34382Trusty TLK contains a vulnerability in the NVIDIA TLK kernel’s tz_map_shared_mem function where an integer overflow on the size parameter ca
- CVE-2021-34381Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow
- CVE-2021-34380Bootloader contains a vulnerability in NVIDIA MB2 where potential heap overflow might cause corruption of the heap metadata, which might lea
- CVE-2021-34379Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 10 is missing.
- CVE-2021-34378Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 11 is missing.
- CVE-2021-34377Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 9 is missing.
- CVE-2021-34376Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 5 is missing.
- CVE-2021-34375Trusty contains a vulnerability in all trusted applications (TAs) where the stack cookie was not randomized, which might result in stack-bas
- CVE-2021-34374Trusty contains a vulnerability in command handlers where the length of input buffers is not verified.
- CVE-2021-34373Trusty trusted Linux kernel (TLK) contains a vulnerability in the NVIDIA TLK kernel where a lack of heap hardening could cause heap overflow
- CVE-2021-1073NVIDIA GeForce Experience, all versions prior to 3.23, contains a vulnerability in the login flow when a user tries to log in by using a bro
- CVE-2021-34397Bootloader contains a vulnerability in NVIDIA MB2, which may cause free-the-wrong-heap, which may lead to limited denial of service.
- CVE-2021-34396Bootloader contains a vulnerability in access permission settings where unauthorized software may be able to overwrite NVIDIA MB2 code, whic
- CVE-2021-34395Trusty TLK contains a vulnerability in its access permission settings where it does not properly restrict access to a resource from a user w
- CVE-2021-34394Trusty contains a vulnerability in the NVIDIA OTE protocol that is present in all TAs.
- CVE-2021-34393Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not expose any command.
- CVE-2021-34392Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the tz_map_shared_mem function can bypass boundary
- CVE-2021-34391Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow thro
- CVE-2021-34390Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow thro
- CVE-2021-34372Trusty (the trusted OS produced by NVIDIA for Jetson devices) driver contains a vulnerability in the NVIDIA OTE protocol message parsing cod
- CVE-2021-34389Trusty contains a vulnerability in NVIDIA OTE protocol message parsing code, which is present in all the TAs.
- CVE-2021-34388Bootloader contains a vulnerability in NVIDIA TegraBoot where a potential heap overflow might allow an attacker to control all the RAM after
- CVE-2021-34387The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRA
- CVE-2021-34386Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multipli
- CVE-2021-1087NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin), which could allow an attacker to retrieve information
- CVE-2021-1086NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it allows guests to control unauthorized resource
- CVE-2021-1085NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where there is the potential to write to a shared memo
- CVE-2021-1084NVIDIA vGPU driver contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager (vGPU plugin), in which an input length
- CVE-2021-1083NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager (vGPU plugin), in which an input lengt
- CVE-2021-1082NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), in which an input length is not validated, which may