NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time window timed to corrupt code execution, which may impact confidentiality, integrity, or availability. The scope impact may extend to other components.
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HLinux Kernel
OSLinuxall versionsMicrosoft Windows
OSMicrosoftall versionsNvidia Geforce Gt 605
HWNvidiaall versionsNvidia Geforce Gt 610
HWNvidiaall versionsNvidia Geforce Gt 620
HWNvidiaall versionsNvidia Geforce Gt 625
HWNvidiaall versionsNvidia Geforce Gt 630
HWNvidiaall versionsNvidia Geforce Gt 635
HWNvidiaall versionsNvidia Geforce Gt 640
HWNvidiaall versionsNvidia Geforce Gt 705
HWNvidiaall versionsNvidia Geforce Gt 710
HWNvidiaall versionsNvidia Geforce Gt 720
HWNvidiaall versionsNvidia Geforce Gt 730
HWNvidiaall versionsNvidia Geforce Gt 740
HWNvidiaall versionsNvidia Geforce Gtx 645
HWNvidiaall versionsNvidia Geforce Gtx 650
HWNvidiaall versionsNvidia Geforce Gtx 650 Ti
HWNvidiaall versionsNvidia Geforce Gtx 650 Ti Boost
HWNvidiaall versionsNvidia Geforce Gtx 660
HWNvidiaall versionsNvidia Geforce Gtx 660 Ti
HWNvidiaall versionsNvidia Geforce Gtx 670
HWNvidiaall versionsNvidia Geforce Gtx 680
HWNvidiaall versionsNvidia Geforce Gtx 690
HWNvidiaall versionsNvidia Geforce Gtx 745
HWNvidiaall versionsNvidia Geforce Gtx 750
HWNvidiaall versionsNvidia Geforce Gtx 750 Ti
HWNvidiaall versionsNvidia Geforce Gtx 760
HWNvidiaall versionsNvidia Geforce Gtx 760 Ti
HWNvidiaall versionsNvidia Geforce Gtx 770
HWNvidiaall versionsNvidia Geforce Gtx 780
HWNvidiaall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
Related vulnerabilities
CVE-2026-8398CRITICAL9.3⚠ KEVPL ✓same product
Atak na łańcuch dostaw DAEMON Tools Lite — trojanizacja instalatorów
CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓same product
Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty
CVE-2025-34028CRITICAL9.3⚠ KEVPL ✓same product
Commvault Command Center – nieuwierzytelniony RCE przez path traversal w ZIP
CVE-2024-7262CRITICAL9.3⚠ KEVPL ✓same product
Path Traversal w Kingsoft WPS Office — ładowanie dowolnej biblioteki Windows
CVE-2024-4577CRITICAL9.8⚠ KEVPL ✓same product
PHP CGI argument injection – RCE na Windows przez mechanizm Best-Fit