CveMateVulnerability intelligence

Nvidia vulnerabilities, page 4

1,185 vulnerabilities

Known vulnerabilities in Nvidia products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 453 products.

CVE-2021-1115nvidiagpu_display_driver+14y ago27-10-2021 20:35

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs, where an attacker with local unprivileged system access may cause a NULL pointer dereference, which may lead to denial of service in a component beyond the vulnerable component.CVE-2021-1060nvidianvidia virtual gpu software+15y ago08-01-2021 15:05

NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin, in which an input index is not validated, which may lead to tampering of data or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).CVE-2021-1059nvidianvidia virtual gpu manager+15y ago08-01-2021 15:05

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input index is not validated, which may lead to integer overflow, which in turn may cause tampering of data, information disclosure, or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).CVE-2021-1066nvidianvidia virtual gpu manager+15y ago08-01-2021 15:05

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which input data is not validated, which may lead to unexpected consumption of resources, which in turn may lead to denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).CVE-2021-1116nvidiagpu_display_driver+14y ago27-10-2021 20:35

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a NULL pointer dereference in the kernel, created within user mode code, may lead to a denial of service in the form of a system crash.CVE-2021-1069nvidialinux_for_tegra+25y ago20-01-2021 22:25

NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVHost function, which may lead to abnormal reboot due to a null pointer reference, causing data loss.CVE-2021-1081nvidianvidia virtual gpu software+15y ago29-04-2021 18:50

NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and Virtual GPU manager (vGPU plugin), in which an input length is not validated, which may lead to information disclosure, tampering of data, or denial of service. This affects vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior 8.7).CVE-2021-1062nvidianvidia virtual gpu manager+15y ago08-01-2021 15:05

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input data length is not validated, which may lead to tampering of data or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).CVE-2021-1125nvidiadgx_station_a100_firmware+1074y ago20-11-2021 14:55

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller which may allow a user with elevated privileges to corrupt program data.CVE-2021-1112nvidiajetson agx xavier series, jetson xavier nx, jetson tx2 series, jetson tx2 nx, jetson nano, jetson nano 2gb, jetson tx1+15y ago11-08-2021 21:33

NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where a null pointer dereference may lead to complete denial of service.CVE-2021-1090nvidiagpu_display_driver+15y ago22-07-2021 00:00

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for control calls where the software reads or writes to a buffer by using an index or pointer that references a memory location after the end of the buffer, which may lead to data tampering or denial of service.CVE-2021-1073nvidiageforce_experience+15y ago25-06-2021 19:25

NVIDIA GeForce Experience, all versions prior to 3.23, contains a vulnerability in the login flow when a user tries to log in by using a browser, while, at the same time, any other web page is loaded in other tabs of the same browser. In this situation, the web page can get access to the token of the user login session, leading to the possibility that the user’s account is compromised. This may lead to the targeted user’s data being accessed, altered, or lost.CVE-2021-1097nvidianvidia virtual gpu software+15y ago21-07-2021 02:55

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it improperly validates the length field in a request from a guest. This flaw allows a malicious guest to send a length field that is inconsistent with the actual length of the input, which may lead to information disclosure, data tampering, or denial of service. This affects vGPU version 12.x (prior to 12.3), version 11.x (prior to 11.5) and version 8.x (prior 8.8).CVE-2021-1096nvidiagpu_display_driver+15y ago22-07-2021 04:25

NVIDIA Windows GPU Display Driver for Windows contains a vulnerability in the NVIDIA kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where dereferencing a NULL pointer may lead to a system crash.CVE-2021-1078nvidiagpu_display_driver+15y ago21-04-2021 22:30

NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel driver (nvlddmkm.sys) where a NULL pointer dereference may lead to system crash.CVE-2021-1064nvidianvidia virtual gpu manager+15y ago08-01-2021 15:05

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which it obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer, which may lead to information disclosure or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).CVE-2021-1110nvidiajetson agx xavier series, jetson xavier nx+15y ago11-08-2021 21:33

NVIDIA Linux kernel distributions on Jetson Xavier contain a vulnerability in camera firmware where a user can change input data after validation, which may lead to complete denial of service and serious data corruption of all kernel components.CVE-2021-1100nvidianvidia virtual gpu software+15y ago21-07-2021 02:55

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager kernel mode driver (nvidia.ko), in which a pointer to a user-space buffer is not validated before it is dereferenced, which may lead to denial of service. This affects vGPU version 12.x (prior to 12.3), version 11.x (prior to 11.5) and version 8.x (prior 8.8).CVE-2021-1067nvidiashield_experience+15y ago20-01-2021 22:25

NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the implementation of the RPMB command status, in which an attacker can write to the Write Protect Configuration Block, which may lead to denial of service or escalation of privileges.CVE-2021-1087nvidianvidia virtual gpu software+15y ago29-04-2021 18:50

NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin), which could allow an attacker to retrieve information that could lead to a Address Space Layout Randomization (ASLR) bypass. This affects vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior to 8.7).