Vulnerabilities in nvidia

888 results
Vexday analysis

A NVIDIA apresenta 49 vulnerabilidades catalogadas, das quais 4 são críticas, mas nenhuma está sob ataque ativo no momento. A ausência de publicações nos últimos 90 dias indica um panorama estável, embora a fraqueza dominante seja a desreferência de ponteiro nulo (CWE-476), típica de falhas de validação que podem causar negação de serviço. O risco atual é moderado e não apresenta pressão imediata de exploração em campo.

CVE-2025-23327HIGHNVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through specEPSS 0.5%CVE-2026-65124MEDIUMNVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an XML injection. A successful exploit of EPSS 0.5%CVE-2025-23360HIGHNVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successfuEPSS 0.5%CVE-2026-65084HIGHNVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improper certificate validation.EPSS 0.5%CVE-2020-5991—NVIDIA CUDA Toolkit, all versions prior to 11.1.1, contains a vulnerability in the NVJPEG library in which an out-of-bounds read or write opEPSS 0.5%CVE-2024-53880MEDIUMNVIDIA Triton Inference Server contains a vulnerability in the model loading API, where a user could cause an integer overflow or wraparoundEPSS 0.5%CVE-2021-1074HIGHNVIDIA GPU Display Driver for Windows installer contains a vulnerability where an attacker with local unprivileged system access may be ableEPSS 0.5%CVE-2021-39158HIGHDependency injection in NVCaffeEPSS 0.5%CVE-2025-23335MEDIUMNVIDIA Triton Inference Server for Windows and Linux and the Tensor RT backend contain a vulnerability where an attacker could cause an undeEPSS 0.5%CVE-2023-31025MEDIUMCVEEPSS 0.5%CVE-2026-47482HIGHNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifeEPSS 0.5%CVE-2025-33184HIGHNVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue. AEPSS 0.5%CVE-2025-33183HIGHNVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue. AEPSS 0.5%CVE-2026-47480HIGHNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exception. A successful exploit ofEPSS 0.5%CVE-2026-47479HIGHNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successfuEPSS 0.5%CVE-2026-65105HIGHNVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service wEPSS 0.5%CVE-2022-42282MEDIUMNVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may lead to information EPSS 0.5%CVE-2025-23321HIGHNVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a divide by zero issue by issuing an EPSS 0.5%CVE-2026-24147MEDIUMNVIDIA Triton Inference Server contains a vulnerability in triton server where an attacker may cause an information disclosure by uploading EPSS 0.5%CVE-2023-25531HIGHNVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploEPSS 0.5%