NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevated privileges to generate valid microcode by identifying, exploiting, and loading vulnerable microcode. Such an attack could lead to information disclosure, data corruption, or denial of service of the device. The scope may extend to other components.
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HLinux Kernel
OSLinuxall versionsMicrosoft Windows
OSMicrosoftall versionsNvidia Geforce Gtx 950
HWNvidiaall versionsNvidia Geforce Gtx 960
HWNvidiaall versionsNvidia Geforce Gtx 970
HWNvidiaall versionsNvidia Geforce Gtx 980
HWNvidiaall versionsNvidia Geforce Gtx Titan X
HWNvidiaall versionsNvidia Jetson Nano
HWNvidiaall versionsNvidia Jetson Tx1
HWNvidiaall versionsNvidia Quadro M1000m
HWNvidiaall versionsNvidia Quadro M1200
HWNvidiaall versionsNvidia Quadro M2000
HWNvidiaall versionsNvidia Quadro M2000m
HWNvidiaall versionsNvidia Quadro M2200
HWNvidiaall versionsNvidia Quadro M3000m
HWNvidiaall versionsNvidia Quadro M4000
HWNvidiaall versionsNvidia Quadro M4000m
HWNvidiaall versionsNvidia Quadro M5000
HWNvidiaall versionsNvidia Quadro M5000m
HWNvidiaall versionsNvidia Quadro M500m
HWNvidiaall versionsNvidia Quadro M520
HWNvidiaall versionsNvidia Quadro M5500
HWNvidiaall versionsNvidia Quadro M6000
HWNvidiaall versionsNvidia Quadro M600m
HWNvidiaall versionsNvidia Quadro M620
HWNvidiaall versionsNvidia Shield Tv
HWNvidiaall versionsNvidia Shield Tv Pro
HWNvidiaall versionsNvidia Tesla M10
HWNvidiaall versionsNvidia Tesla M2050
HWNvidiaall versionsNvidia Tesla M2070
HWNvidiaall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
Related vulnerabilities
CVE-2026-8398CRITICAL9.3⚠ KEVPL ✓same product
Atak na łańcuch dostaw DAEMON Tools Lite — trojanizacja instalatorów
CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓same product
Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty
CVE-2025-34028CRITICAL9.3⚠ KEVPL ✓same product
Commvault Command Center – nieuwierzytelniony RCE przez path traversal w ZIP
CVE-2024-7262CRITICAL9.3⚠ KEVPL ✓same product
Path Traversal w Kingsoft WPS Office — ładowanie dowolnej biblioteki Windows
CVE-2024-4577CRITICAL9.8⚠ KEVPL ✓same product
PHP CGI argument injection – RCE na Windows przez mechanizm Best-Fit