Nvidia vulnerabilities
1,179 CVEs and advisories name Nvidia as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-33207NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control
- CVE-2026-65102NVIDIA DeepStream contains a vulnerability where an attacker could cause an integer overflow by supplying crafted tensor dimensions in a YA
- CVE-2026-65112NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource consumption.
- CVE-2026-65118NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation.
- CVE-2026-65117NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password.
- CVE-2026-65115NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption.
- CVE-2026-65114NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause missing authentication for a critical func
- CVE-2026-65113NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded credentials.
- CVE-2026-65130NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection.
- CVE-2026-65129NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation.
- CVE-2026-65128NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause SQL injection.
- CVE-2026-65127NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause exposure of sensitive system information d
- CVE-2026-65126NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workf
- CVE-2026-65125NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause external control of a file name or path.
- CVE-2026-65124NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an XML injection.
- CVE-2026-65121NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an improper authentication issue.
- CVE-2026-65179NVIDIA NeMo contains a vulnerability in the TabularTokenizer class where it deserializes an untrusted, attacker-controlled .pkl file via pic
- CVE-2026-65178NVIDIA NeMo contains a vulnerability in its dataset-loading workflow where a maliciously crafted model_config.yaml can inject unsafe paramet
- CVE-2026-65111NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection.
- CVE-2026-24239NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious data created by an attacker could cause remote code execution.
- CVE-2026-24267NVIDIA NeMo Speech for all platforms contains a vulnerability in the speech data explorer component, where malicious data created by an atta
- CVE-2026-47625NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization.
- CVE-2026-16497NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration.
- CVE-2026-61769NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
- CVE-2026-61777NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
- CVE-2026-61778NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
- CVE-2026-61779NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
- CVE-2026-61770NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
- CVE-2026-61771NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
- CVE-2026-61772NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.