NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCanonical Ubuntu
OSCanonicalall versionsCitrix Hypervisor
OSCitrixall versionsLinux Kernel
OSLinuxall versionsMicrosoft Azure Stack Hci
APPMicrosoftall versionsMicrosoft Windows
OSMicrosoftall versionsNvidia Cloud Gaming
APPNvidia< 555.99< 555.52.04Nvidia Geforce
APPNvidiaall versionsNvidia Gpu Display Driver
APPNvidia555 – 555.52.04 (excl.)535 – 538.67 (excl.)550 – 552.55 (excl.)555 – 555.99 (excl.)470 – 470.256.02 (excl.)535 – 535.180.01 (excl.)550 – 550.90.07 (excl.)470 – 475.06 (excl.)Nvidia Nvs
APPNvidiaall versionsNvidia Quadro
APPNvidiaall versionsNvidia Rtx
APPNvidiaall versionsNvidia Studio
APPNvidiaall versionsNvidia Tesla
APPNvidiaall versionsNvidia Virtual Gpu
APPNvidia17.0 – 17.2 (excl.)14.0 – 16.6 (excl.)< 13.11< 17.2Red Hat Enterprise Linux Kernel Based Virtual Machine
OSRedhatall versionsVMware vSphere
OSVmwareall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEDoSMemory
Related vulnerabilities
CVE-2026-8398CRITICAL9.3⚠ KEVPL ✓same product
Atak na łańcuch dostaw DAEMON Tools Lite — trojanizacja instalatorów
CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓same product
Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty
CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓same product
Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)
CVE-2025-34028CRITICAL9.3⚠ KEVPL ✓same product
Commvault Command Center – nieuwierzytelniony RCE przez path traversal w ZIP
CVE-2024-7262CRITICAL9.3⚠ KEVPL ✓same product
Path Traversal w Kingsoft WPS Office — ładowanie dowolnej biblioteki Windows