Latest Nvidia Vulnerabilities

● CVE-2023-31037
NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injection by a network call. A successful exploit of this vulnerability may lead to c...
Nvidia Bluefield Bmc=2.8.2-46
Nvidia Bluefield Bmc=23.04
Nvidia Bluefield Bmc=23.07
Nvidia Bluefield Bmc=23.09
Nvidia Bluefield 2 Ga
Nvidia Bluefield 2 Lts
and 1 more
● CVE-2023-31031
CVE
Nvidia Dgx A100 Firmware<1.25
NVIDIA DGX A100
● CVE-2023-31025
CVE
Nvidia Dgx A100 Firmware<00.22.05
NVIDIA DGX A100
● CVE-2023-31034
CVE
Nvidia Dgx A100 Firmware<1.25
NVIDIA DGX A100
● CVE-2023-31033
CVE
Nvidia Dgx A100 Firmware<00.22.05
NVIDIA DGX A100
● CVE-2023-31035
CVE
Nvidia Dgx A100 Firmware<1.25
NVIDIA DGX A100
● CVE-2023-31032
CVE
Nvidia Dgx A100 Firmware<1.25
NVIDIA DGX A100
● CVE-2023-31024
CVE
Nvidia Dgx A100 Firmware<00.22.05
NVIDIA DGX A100
● CVE-2023-31030
CVE
Nvidia Dgx A100 Firmware<00.22.05
NVIDIA DGX A100
● CVE-2023-31029
CVE
Nvidia Dgx A100 Firmware<00.22.05
NVIDIA DGX A100
● CVE-2023-31036
CVE
NVIDIA Triton Inference Server<2.40
Linux Linux kernel
Microsoft Windows
● CVE-2023-31027
NVIDIA GPU Display Driver for Windows contains a vulnerability that allows Windows users with low levels of privilege to escalate privileges when an administrator is updating GPU drivers, which may le...
NVIDIA Virtual GPU<13.9
NVIDIA Virtual GPU>=14.0<15.4
NVIDIA Virtual GPU>=16.0<16.2
Microsoft Windows
● CVE-2023-31022
CVE
NVIDIA Virtual GPU<13.9
NVIDIA Virtual GPU>=14.0<15.4
NVIDIA Virtual GPU>=16.0<16.2
Microsoft Azure Stack Hci
Canonical Ubuntu Linux
Citrix Hypervisor
and 5 more
● CVE-2023-31023
CVE
NVIDIA Virtual GPU<13.9
NVIDIA Virtual GPU>=14.0<15.4
NVIDIA Virtual GPU>=16.0<16.2
Microsoft Windows
● CVE-2023-31026
CVE
NVIDIA Virtual GPU<13.9
NVIDIA Virtual GPU>=14.0<15.4
NVIDIA Virtual GPU>=16.0<16.2
Canonical Ubuntu Linux
Citrix Hypervisor
Linux-kvm Kernel Virtual Machine
and 2 more
● CVE-2023-31021
CVE
NVIDIA Virtual GPU<13.9
NVIDIA Virtual GPU>=14.0<15.4
NVIDIA Virtual GPU>=16.0<16.2
Microsoft Azure Stack Hci
Canonical Ubuntu Linux
Citrix Hypervisor
and 3 more
● CVE-2023-31020
CVE
NVIDIA Virtual GPU<13.9
NVIDIA Virtual GPU>=14.0<15.4
NVIDIA Virtual GPU>=16.0<16.2
Microsoft Windows
● CVE-2023-31019
CVE
NVIDIA Virtual GPU<13.9
NVIDIA Virtual GPU>=14.0<15.4
NVIDIA Virtual GPU>=16.0<16.2
Microsoft Windows
● CVE-2023-31018
CVE
NVIDIA Virtual GPU<13.9
NVIDIA Virtual GPU>=14.0<15.4
NVIDIA Virtual GPU>=16.0<16.2
Microsoft Azure Stack Hci
Canonical Ubuntu Linux
Citrix Hypervisor
and 5 more
● CVE-2023-31017
CVE
NVIDIA Virtual GPU<13.9
NVIDIA Virtual GPU>=14.0<15.4
NVIDIA Virtual GPU>=16.0<16.2
Microsoft Windows
● CVE-2023-31016
CVE
NVIDIA Virtual GPU<13.9
NVIDIA Virtual GPU>=14.0<15.4
NVIDIA Virtual GPU>=16.0<16.2
Microsoft Windows
● CVE-2023-44216
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in...
Canonical Ubuntu Linux=22.04
Amd Ryzen 7 4800u
Intel Core I7-10510u
Intel Core I7-12700k
Intel Core I7-8700
Microsoft Windows 11
and 11 more
● CVE-2023-31015
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue. A successful exploit of this vulnerability may lead to escalation of priv...
Nvidia Dgx H100 Firmware<23.08.18
NVIDIA DGX H100
● CVE-2023-31013
NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges...
Nvidia Dgx H100 Firmware<23.08.18
NVIDIA DGX H100
● CVE-2023-31014
NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer componen...
NVIDIA GeForce Now>=6.00.32705137<=6.04.33108832
Google Android
● CVE-2023-31012
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges ...
Nvidia Dgx H100 Firmware<23.08.18
NVIDIA DGX H100
● CVE-2023-31011
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges ...
Nvidia Dgx H100 Firmware<23.08.18
NVIDIA DGX H100
● CVE-2023-31010
NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges, informatio...
Nvidia Dgx H100 Firmware<23.08.18
NVIDIA DGX H100
● CVE-2023-25534
NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, e...
Nvidia Dgx H100 Firmware<23.08.18
NVIDIA DGX H100
● CVE-2023-31009
NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial o...
Nvidia Dgx H100 Firmware<23.08.18
NVIDIA DGX H100
● CVE-2023-31008
NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of services, ...
Nvidia Dgx H100 Firmware<23.08.18
NVIDIA DGX H100
● CVE-2023-25532
NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to information disclosure.
Nvidia Dgx H100 Firmware<23.08.18
NVIDIA DGX H100
● CVE-2023-25531
NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to code execution, denial ...
Nvidia Dgx H100 Firmware<23.08.18
NVIDIA DGX H100
● CVE-2023-25533
NVIDIA DGX H100 BMC contains a vulnerability in the web UI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to information disclosure, code e...
Nvidia Dgx H100 Firmware<23.08.18
NVIDIA DGX H100
● CVE-2023-25530
NVIDIA DGX H100 BMC contains a vulnerability in the KVM service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of...
Nvidia Dgx H100 Firmware<23.08.18
NVIDIA DGX H100
● CVE-2023-25528
NVIDIA DGX H100 baseboard management controller (BMC) contains a vulnerability in a web server plugin, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted netwo...
Nvidia Dgx H100 Firmware<23.08.18
NVIDIA DGX H100
● CVE-2023-25526
NVIDIA Cumulus Linux contains a vulnerability in neighmgrd and nlmanager where an attacker on an adjacent network may cause an uncaught exception by injecting a crafted packet. A successful exploit ma...
NVIDIA Cumulus Linux<5.5.0
● CVE-2023-25527
NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause corruption of kernel memory. A successful exploit of this vulnerability may lead to...
Nvidia Dgx H100 Firmware<23.08.18
NVIDIA DGX H100
● CVE-2023-25529
NVIDIA DGX H100 BMC and DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a leak of another user’s session token by observing timing discrepanci...
Nvidia Dgx H100 Firmware<23.08.18
NVIDIA DGX H100
Nvidia Dgx H100 Firmware<23.08.18
NVIDIA DGX H100
● CVE-2023-25519
NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restricted host may cause an incorrect user management error. A successful exploit of this vulner...
Nvidia Bluefield 1 Firmware>=18.24.1000
Nvidia Bluefield 1
Nvidia Bluefield 2 Lts Firmware<24.35.3006
Nvidia Bluefield 2 Lts
Nvidia Bluefield 2 Ga Firmware<24.38.1002
Nvidia Bluefield 2 Ga
and 2 more
● CVE-2023-25524
NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacke...
Nvidia Omniverse Launcher<1.8.11
Nvidia Omniverse Launcher<1.8.11
● CVE-2023-25523
NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the nvdisasm binary file, where an attacker may cause a NULL pointer dereference by providing a user with a malformed ELF file....
NVIDIA CUDA Toolkit<12.2
Linux Linux kernel
Microsoft Windows
● CVE-2023-25516
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lead to information disclosure and denial of...
Nvidia Gpu Display Driver<=11.12
Nvidia Gpu Display Driver>=13.0<=13.7
Nvidia Gpu Display Driver>=15.0<=15.2
● CVE-2023-25520
NVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged local attacker can configure invalid settings, resulting in denial of service.
NVIDIA Jetson Linux<32.7.4
NVIDIA Jetson AGX Xavier
NVIDIA Jetson TX2
Nvidia Jetson Tx2 Nx
Nvidia Jetson Xavier Nx
● CVE-2023-25518
NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arb...
NVIDIA Jetson Linux<32.7.4
NVIDIA Jetson AGX Xavier
Nvidia Jetson Xavier Nx
● CVE-2023-25515
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, da...
Nvidia Gpu Display Driver>=470<474.44
Nvidia Gpu Display Driver>=530<536.23
Nvidia Geforce
Nvidia Gpu Display Driver>=530<536.40
Nvidia Studio
Nvidia Gpu Display Driver>=525<529.11
and 15 more
● CVE-2023-25513
NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file. ...
NVIDIA CUDA Toolkit<12.0.1
Linux Linux kernel
Microsoft Windows
● CVE-2023-25507
NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to code execution, deni...
NVIDIA BMC<3.39.30
NVIDIA DGX-1
● CVE-2023-25505
NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, which may lead to deni...
NVIDIA BMC<3.39.30
NVIDIA DGX-1
● CVE-2023-25512
NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read by running cuobjdump on a malformed input file. A successful e...
NVIDIA CUDA Toolkit<12.1.0
Linux Linux kernel
Microsoft Windows

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203