Database/NVIDIA / GPU stack
NVIDIA and GPU stack vulnerabilities
GPU driver, firmware, CUDA, Container Toolkit, vGPU, and accelerator software CVEs, including NVIDIAScape and the rest of the escapes specific to shared GPU hardware. The layer no other vulnerability database treats as a first-class target.
1,183 entries29 critical0 known exploitedFilter and search this layer
2026
- NVIDIA Triton Inference Server: A path traversal scored 9.8 (network, no privileges, fullCriticalAug 18, 2026
- NVIDIA Cumulus Linux: Improper privilege management in the user-management component lets an unprivileged switch userHighAug 18, 2026
- NVIDIA Cumulus Linux - LLDP daemon: Crafted LLDP frames overflow a buffer in the LLDP daemon, reaching code executionHighAug 18, 2026
- NVIDIA Triton Inference Server: Allocation of resources without limits lets an unauthenticated caller exhaustHighAug 18, 2026
- NVIDIA Triton Inference Server: Improper input validation crashes the serverHighAug 18, 2026
- NVIDIA NVOS (network switches): With PKA-only SSH mode enabled, an administrator can inadvertently leave an alternativeHighAug 18, 2026
- NVIDIA Triton Inference Server: An absolute path traversal reaches code execution and information disclosureMediumAug 18, 2026
- NVIDIA Triton Inference Server: An absolute path traversal reachable from a local low-privileged account reaches codeMediumAug 18, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): MULTI-TENANT ISOLATION: An out-of-bounds accessHighAug 15, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighAug 15, 2026
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A use-after-free in the amdgpu power managementHighAug 15, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/gfx8): A correctness defect in the amdgpu RAS / GPUUnscoredAug 12, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)UnscoredAug 12, 2026
- Intel Gaudi / vLLM hardware plugin: Malformed input to the Gaudi vLLM plugin crashes or wedges the serving processMediumAug 11, 2026
- Intel Gaudi / gaudi-container-runtime: MULTI-TENANT ISOLATION: A path-traversal bug in the container runtime shimMediumAug 11, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn4): A correctness defect in the amdgpuHighAug 10, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vce): An out-of-bounds access in the amdgpuHighAug 10, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A NULL pointer dereference in the amdgpu kernel driver coreHighAug 10, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A division by zero in the amdgpu firmwareHighAug 10, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A use-after-free in the amdgpu display core (DC/DM)HighAug 10, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): MULTI-TENANT ISOLATION: A use-after-freeHighAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): MULTI-TENANT ISOLATION: A use-after-freeHighAug 10, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu): A correctness defect in the amdgpuHighAug 10, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A memory or reference-count leakUnscoredAug 10, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): MULTI-TENANT ISOLATION: MissingUnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/sdma7.1): A correctness defect in the amdgpu RAS /UnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/sdma4.4.2): A correctness defect in the amdgpu RAS /UnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/gfx9): A correctness defect in the amdgpu RAS / GPUUnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/gfx9.4.3): A correctness defect in the amdgpu RAS /UnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/gfx12): A correctness defect in the amdgpu RAS / GPUUnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/gfx12.1): A correctness defect in the amdgpu RAS /UnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/gfx10): A correctness defect in the amdgpu RAS / GPUUnscoredAug 10, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A memory or reference-count leakUnscoredAug 10, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)UnscoredAug 10, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu/userq): A race condition or locking defectUnscoredAug 10, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A memory or reference-count leakUnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/gfx11): A correctness defect in the amdgpu RAS / GPUUnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/sdma5.0): A correctness defect in the amdgpu RAS /UnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/sdma5.2): A correctness defect in the amdgpu RAS /UnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/sdma6.0): A correctness defect in the amdgpu RAS /UnscoredAug 10, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/sdma7.0): A correctness defect in the amdgpu RAS /UnscoredAug 10, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreUnscoredAug 10, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): MULTI-TENANT ISOLATION: MissingUnscoredAug 10, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A NULL pointer dereference in the amdgpuUnscoredAug 10, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/gfx): An out-of-bounds access in the amdgpuUnscoredAug 10, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A race condition or locking defect in the amdgpu displayUnscoredAug 10, 2026
- NVIDIA Dynamo: Unauthenticated remote code executionCriticalAug 4, 2026
- NVIDIA Dynamo: RCE via buffer overflow in tensor shape validationHighAug 4, 2026
- NVIDIA Dynamo: Deserialization of untrusted data in Dynamo reaches denial of service and data tamperingHighAug 4, 2026
- NVIDIA Dynamo: MITM via improper TLS certificate verificationHighAug 4, 2026
- NVIDIA Dynamo: Arbitrary file access via path traversalHighAug 4, 2026
- NVIDIA Dynamo: SSRF via URL handlingHighAug 4, 2026
- NVIDIA Dynamo: SSRF in remote resource loadingHighAug 4, 2026
- NVIDIA Dynamo: SSRF in model fetchingHighAug 4, 2026
- NVIDIA Dynamo: SSRF in data retrievalHighAug 4, 2026
- NVIDIA Dynamo: SSRF in API communicationHighAug 4, 2026
- NVIDIA Dynamo: SSRF in external service communicationHighAug 4, 2026
- NVIDIA Dynamo: Improper access control on privileged operationsMediumAug 4, 2026
- NVIDIA Dynamo: DoS / corruption via race in resource syncMediumAug 4, 2026
- NVIDIA Dynamo: TOCTOU raceMediumAug 4, 2026
- NVIDIA Dynamo: Error messages from Dynamo leak sensitive information to an unauthenticated network callerMediumAug 4, 2026
- Triton Inference Server: Path traversal in model file operationsMediumAug 4, 2026
- DCGM: DoS of the GPU telemetry/health daemon (resource exhaustion)HighJul 28, 2026
- NVIDIA NeMo Framework: OS command injection reaches code execution with the job's privilegesHighJul 27, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vce1): An out-of-bounds access in the amdgpuHighJul 25, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJul 24, 2026
- Transformers4Rec: Code exec via insecure deserialization in the pipelineMediumJul 21, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): MULTI-TENANT ISOLATION: Memory is handedHighJul 19, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu/vce): A correctness defect in the amdgpu kernel driver coreHighJul 19, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu/jpeg): A correctness defect in the amdgpu kernel driver coreHighJul 19, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/jpeg): A correctness defect in the amdgpu RAS / GPUHighJul 19, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu/jpeg): A correctness defect in the amdgpu kernel driver coreHighJul 19, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu/jpeg): A correctness defect in the amdgpu kernel driver coreHighJul 19, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu/jpeg): A correctness defect in the amdgpu kernel driver coreHighJul 19, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu/jpeg): A correctness defect in the amdgpu kernel driver coreHighJul 19, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu/jpeg): A correctness defect in the amdgpu kernel driver coreHighJul 19, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu/jpeg): A correctness defect in the amdgpu kernel driver coreHighJul 19, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu/jpeg): A correctness defect in the amdgpu kernel driver coreHighJul 19, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn): A correctness defect in the amdgpuHighJul 19, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn): A correctness defect in the amdgpuHighJul 19, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn): A correctness defect in the amdgpuHighJul 19, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn): A correctness defect in the amdgpuHighJul 19, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn): A correctness defect in the amdgpuHighJul 19, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn): A correctness defect in the amdgpuHighJul 19, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn): A correctness defect in the amdgpuHighJul 19, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn): A correctness defect in the amdgpuHighJul 19, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A correctness defect in the amdgpuHighJul 19, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJul 19, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): MULTI-TENANT ISOLATION: MissingUnscoredJul 19, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): MULTI-TENANT ISOLATION: MissingUnscoredJul 19, 2026
- TensorRT-LLM: RCE via unsafe deserializationHighJul 14, 2026
- TensorRT: Info disclosure / code exec (OOB read in tensor parsing)HighJul 14, 2026
- TensorRT: Code exec (OOB write in tensor manipulation)HighJul 14, 2026
- TensorRT: Code exec (buffer overflow in tensor dimension handling)HighJul 14, 2026
- TensorRT-LLM: RCE via insecure deserialization on model loadHighJul 14, 2026
- TensorRT-LLM: RCE potential (OOB write in tensor manipulation)HighJul 14, 2026
- Triton Inference Server: DoS via resource exhaustionHighJul 14, 2026
- Triton Inference Server: DoS via stack overflow in recursive processingHighJul 14, 2026
- Triton Inference Server: DoS via memory leak (improper resource cleanup)HighJul 14, 2026
- Triton Inference Server: DoS via allocation-request resource exhaustionHighJul 14, 2026
- Triton Inference Server: DoS via unchecked exceptionHighJul 14, 2026
- Triton Inference Server: DoS via resource leak in error pathsHighJul 14, 2026
- TensorRT-LLM: Memory corruption (improper array bounds checking)HighJul 14, 2026
- TensorRT-LLM: Missing authentication in authorization checksHighJul 14, 2026
- TensorRT-LLM: SSRF via plugin loadingMediumJul 14, 2026
- Triton Inference Server: MITM via weak TLS verificationMediumJul 14, 2026
- TensorRT-LLM: Code exec via insecure deserialization on model loadMediumJul 14, 2026
- TensorRT-LLM: Missing authentication in configuration processingMediumJul 14, 2026
- TensorRT-LLM: Unsafe external file loadingMediumJul 14, 2026
- TensorRT-LLM: DoS via large tensor allocationMediumJul 14, 2026
- TensorRT-LLM: DoS / memory corruption (insufficient tensor validation)MediumJul 14, 2026
- TensorRT-LLM: DoS via assertion failureMediumJul 14, 2026
- TensorRT: DoS via resource exhaustionMediumJul 14, 2026
- NVIDIA AIStore: Missing authentication on API endpointsCriticalJul 1, 2026
- Container Toolkit: Container escape to host root via TOCTOU raceHighJul 1, 2026
- Megatron-Bridge: RCE via insecure deserialization of model configsHighJul 1, 2026
- Megatron-Bridge: SSRF in file operationsHighJul 1, 2026
- Megatron-Bridge: RCE via unsafe deserialization in weight loadingHighJul 1, 2026
- Megatron-Bridge: RCE via deserialization of untrusted model dataHighJul 1, 2026
- Megatron-Bridge: RCE via insecure config deserializationHighJul 1, 2026
- Megatron-Bridge: Validation bypass via incorrect type comparisonHighJul 1, 2026
- Megatron-Bridge: RCE via unsafe deserialization in module loadingHighJul 1, 2026
- Megatron-Bridge: RCE via malicious deserialized objectsHighJul 1, 2026
- Megatron-Bridge: RCE via unsafe evaluation of loaded configHighJul 1, 2026
- NeMo Framework: Command injection in script processingHighJul 1, 2026
- Megatron-Bridge: RCE via deserialization of untrusted objectsHighJul 1, 2026
- Triton Inference Server: DoS via improper exception handlingHighJul 1, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJul 1, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJul 1, 2026
- Triton Inference Server: Use-after-free in request processingMediumJul 1, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumJun 26, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A race condition or locking defectMediumJun 26, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumJun 26, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amd/ras): A NULL pointer dereference in the amdgpu RAS / GPUMediumJun 26, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amd/ras): A NULL pointer dereference in the amdgpu RAS / GPUMediumJun 26, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJun 25, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJun 25, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJun 25, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumJun 25, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu): MULTI-TENANT ISOLATION: A double freeHighJun 24, 2026
- NeMo Framework: RCE via malicious YAML deserializationHighJun 16, 2026
- NeMo Framework: RCE via unsafe object deserializationHighJun 16, 2026
- NVIDIA DALI: Code exec via OOB write on malformed tensor dimsHighJun 9, 2026
- NVIDIA DALI: Code exec via buffer overflowHighJun 9, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu/userq): A correctness defect in the amdgpuHighJun 8, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): MULTI-TENANT ISOLATION: Memory is handedMediumJun 8, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJun 3, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumJun 3, 2026
- NVTabular: RCE via unsafe pickle deserializationHighJun 2, 2026
- NVTabular: RCE via insecure deserialization in data processingHighJun 2, 2026
- AI Tensor Engine for ROCm (AITER) - MessageQueue.recv() in shm_broadcast.py: MULTI-TENANT ISOLATION: AITER'sHighJun 1, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn4): An out-of-bounds access in the amdgpuHighMay 28, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn4): An out-of-bounds access in the amdgpuHighMay 28, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): An out-of-bounds access in the amdgpuHighMay 28, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn3): An out-of-bounds access in the amdgpuHighMay 28, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu/sdma4): A correctness defect in the amdgpuMediumMay 28, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A correctness defect in the amdgpuHighMay 27, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A memory or reference-count leakMediumMay 27, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A memory or reference-count leak in the amdgpu RASMediumMay 27, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A correctness defect in the amdgpuMediumMay 27, 2026
- GPU Display Driver: Local privesc to host root (use-after-free in context handling)HighMay 26, 2026
- NVIDIA Merlin Transformers4Rec: Improper deserialization of untrusted data reaches code execution and informationHighMay 26, 2026
- GPU Display Driver: Local privesc (insufficient permission checks)HighMay 26, 2026
- GPU Display Driver: Local privesc (synchronization issue)HighMay 26, 2026
- GPU Display Driver: Local privesc (integer overflow in address calc)HighMay 26, 2026
- GPU Display Driver: Local privesc (buffer overflow in GPU command processing)HighMay 26, 2026
- GPU Display Driver / GPU firmware: Local privesc via improper GPU firmware parameter validationHighMay 26, 2026
- Isaac Launchable: Info disclosure (unencrypted sensitive data in transit)HighMay 26, 2026
- vGPU Manager: Guest-to-host impact via invalid guest-driver inputHighMay 26, 2026
- GPU Display Driver: Info disclosure (OOB read of graphics memory)HighMay 26, 2026
- vGPU Manager: Guest-to-host escape (use-after-free in GPU context mgmt)HighMay 26, 2026
- GPU Display Driver: DoS / privesc (race in GPU memory management)MediumMay 26, 2026
- GPU Display Driver: Cross-tenant info disclosure via GPU memory leakageMediumMay 26, 2026
- vGPU Manager: Host impact via GPU command-buffer overflowMediumMay 26, 2026
- GPU Display Driver: Improper access control in driver operationsMediumMay 26, 2026
- GPU Display Driver: DoS (race in GPU resource allocation)MediumMay 26, 2026
- Triton Inference Server: Missing authenticationCriticalMay 20, 2026
- BioNeMo Framework: Arbitrary file read/write via path traversalHighMay 20, 2026
- NVIDIA TensorRT: An out-of-bounds write reachable from the network reaches data tampering, scored 8.2 with noHighMay 20, 2026
- DGX Spark: Hardcoded credentials in configHighMay 20, 2026
- Triton Inference Server: Info disclosure / RCE (OOB read in tensor processing)HighMay 20, 2026
- Triton Inference Server: RCE (integer overflow in model config parsing)HighMay 20, 2026
- BioNeMo Framework: RCE via insecure deserialization on model loadHighMay 20, 2026
- TensorRT-LLM: RCE via insecure config deserializationHighMay 20, 2026
- Triton Inference Server: Arbitrary file access via unsafe path operationsHighMay 20, 2026
- Triton Inference Server: DoS / memory corruption (integer overflow in buffer allocation)HighMay 20, 2026
- Triton Inference Server: Weak authenticationHighMay 20, 2026
- TensorRT-LLM: Code exec via insecure deserializationMediumMay 20, 2026
- Triton Inference Server: DoS via connection floodingMediumMay 20, 2026
- TensorRT-LLM: DoS (null deref in tensor ops)MediumMay 20, 2026
- Triton Inference Server: Info disclosure via path traversal on model filesMediumMay 20, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A use-after-free in the amdgpu firmwareHighMay 8, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amdgpu): A race condition or locking defect in the amdgpu display coreMediumMay 8, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A race condition or locking defect in the amdgpu displayMediumMay 8, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amdgpu): A correctness defect in the amdgpu display core (DC/DM)MediumMay 8, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumMay 8, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumMay 8, 2026
- Linux kernel amdgpu kernel driver core (drm/amd): A NULL pointer dereference in the amdgpu kernel driver coreMediumMay 8, 2026
- Linux kernel amdgpu kernel driver core (drm/amd): A NULL pointer dereference in the amdgpu kernel driver coreMediumMay 8, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu): MULTI-TENANT ISOLATION: MissingMediumMay 8, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu/userq): A memory or reference-count leakMediumMay 8, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu): MULTI-TENANT ISOLATION: MissingMediumMay 8, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): MULTI-TENANT ISOLATION: A use-after-freeHighMay 6, 2026
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A NULL pointer dereference in the amdgpu powerMediumMay 6, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumMay 6, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu): MULTI-TENANT ISOLATION: MissingMediumMay 6, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumMay 6, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu): MULTI-TENANT ISOLATION: An out-of-boundsHighMay 1, 2026
- Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdgpu): A NULL pointer dereference in the amdkfd (KFD computeMediumMay 1, 2026
- NVIDIA FLARE SDK: Unauthenticated remote code executionCriticalApr 28, 2026
- NVIDIA FLARE SDK: RCE via unsafe deserialization in message handlingHighApr 28, 2026
- NemoClaw: Sensitive info exposure in logsHighApr 28, 2026
- NVIDIA FLARE SDK: Auth bypass via insufficient input validationMediumApr 28, 2026
- NemoClaw: SSRFMediumApr 28, 2026
- Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdgpu): MULTI-TENANT ISOLATION: A use-after-free in the amdkfdHighApr 24, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A use-after-free in the amdgpu display core (DC/DM)HighApr 22, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumApr 22, 2026
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreMediumApr 22, 2026
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A correctness defect in the amdgpu kernel driver core reachableMediumApr 22, 2026
- NVIDIA CUDA-Q: Info disclosure / code exec (OOB read in circuit compilation)HighApr 21, 2026
- KAI Scheduler: Missing authentication on API endpointsHighApr 21, 2026
- KAI Scheduler: Improper access control in resource allocation (cross-tenant quota abuse)MediumApr 21, 2026
- Triton Inference Server: DoS via memory exhaustion on malformed inputHighApr 7, 2026
- NVIDIA Triton Inference Server: A malformed request crashes the server outrightHighApr 7, 2026
- NVIDIA Triton Inference Server: A second malformed-request crash pathHighApr 7, 2026
- NVIDIA Triton Inference Server: A malformed request header crashes the server before the body is even parsedHighApr 7, 2026
- NVIDIA DALI: RCE via unsafe deserializationHighApr 7, 2026
- Triton Inference Server: Unauthorized file access via path traversalMediumApr 7, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): An out-of-bounds access in the amdgpuMediumApr 3, 2026
- BioNeMo Framework: Remote RCE via untrusted serializationHighMar 31, 2026
- Jetson Xavier / Orin: Authentication bypass in a network serviceHighMar 31, 2026
- BioNeMo Framework: RCE via malicious pickled dataHighMar 31, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu/userq): A race condition or locking defectMediumMar 25, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): MULTI-TENANT ISOLATION: Memory is handedMediumMar 25, 2026
- NVIDIA Model Optimizer: RCE via unsafe deserializationHighMar 24, 2026
- NVIDIA Megatron-LM: Checkpoint loading reaches remote code execution when a user loads a crafted checkpointHighMar 24, 2026
- NVIDIA Megatron-LM: The inferencing path reaches remote code execution on crafted inputHighMar 24, 2026
- NVIDIA Megatron-LM: A second checkpoint-loading remote code execution pathHighMar 24, 2026
- NeMo Framework: RCE via unsafe deserializationHighMar 24, 2026
- NeMo Framework: RCE via unsafe deserialization on model loadHighMar 24, 2026
- NVIDIA Triton Inference Server: A large compressed payload - a decompression bomb against the HTTP endpointHighMar 24, 2026
- NVIDIA License System - Delegated Licensing Service (DLS): Improper authentication in the DLS lets an unauthenticatedMediumFeb 24, 2026
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A correctness defect in the amdgpu power managementMediumFeb 18, 2026
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A NULL pointer dereference in the amdgpuMediumFeb 14, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A NULL pointer dereference in the amdgpuUnscoredFeb 4, 2026
- NVIDIA Megatron-LM: A further script-level code-injection path, filed under the same class as the 2025 setHighFeb 3, 2026
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu/userq): A memory or reference-count leakUnscoredJan 31, 2026
- NVIDIA GEN3C (Spatial Intelligence Lab) inference API server: The inference API server runs Python pickle.loads()Critical2026
- NVIDIA BlueField - VIRTIO-Net emulation: MULTI-TENANT ISOLATION: a VM user sends a crafted message to the BlueFieldCritical2026
- NVIDIA Jetson Linux (initrd command-line handling): An attacker with physical access and no credentials at all canHigh2026
- NVIDIA TensorRT-LLM: MULTI-TENANT ISOLATION: concurrent requests race inside TensorRT-LLM and reach data tamperingMedium2026
- NVIDIA Jetson Linux (initrd, nvluks trusted application): The nvluks trusted application is left enabled after initrdMedium2026
2025
- BlueField (GA firmware): RCE on the DPU via firmware buffer overflowCriticalJul 1, 2026
- BlueField (GA firmware): RCE on the DPU via firmware buffer overflowCriticalJul 1, 2026
- GPU Display Driver: DoS (input validation)MediumMay 26, 2026
- TensorRT-LLM: Privesc via unsafe deserializationHighMay 20, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/ras): A NULL pointer dereference in the amdgpu RAS /MediumMay 6, 2026
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A NULL pointer dereference in the amdgpuMediumMay 6, 2026
- AMD Platform Configuration Blob (APCB) SMM driver, EPYC and Instinct MI300A/MI300C: Incorrect use of the UEFIHighApr 16, 2026
- Apex: Remote RCE via unsafe pickle deserializationCriticalMar 24, 2026
- Megatron-LM: Local privesc / RCE via unsafe pickle deserializationHighMar 24, 2026
- Megatron-LM: RCE via insecure deserializationHighMar 24, 2026
- Triton Inference Server: Remote DoS via race conditionHighMar 24, 2026
- Triton Inference Server: Remote DoS via race condition in network processingHighMar 24, 2026
- SNAP-4 container (BlueField storage): DoS of the storage dataplaneMediumMar 24, 2026
- SNAP-4 container: DoS (integer overflow)MediumMar 24, 2026
- HGX / DGX B300: Authentication bypass in the hardware management interfaceMediumMar 24, 2026
- Cumulus Linux / NVOS: Privesc to switch adminHighFeb 24, 2026
- Cumulus Linux / NVOS: Command injectionHighFeb 24, 2026
- Cumulus Linux / NVOS: Command injection (local)HighFeb 24, 2026
- NeMo Framework: Remote RCE via insecure deserialization over the networkHighFeb 18, 2026
- NeMo Framework: Arbitrary Python code exec via code injectionHighFeb 18, 2026
- Megatron-Bridge: RCE via unsafe pickle deserializationHighFeb 18, 2026
- Megatron-Bridge: RCE via unsafe pickle deserializationHighFeb 18, 2026
- NeMo Framework: RCE via unsafe deserializationHighFeb 18, 2026
- NeMo Framework: RCE via unsafe deserializationHighFeb 18, 2026
- NeMo Framework: Local command injectionHighFeb 18, 2026
- NeMo Framework: Local command injectionHighFeb 18, 2026
- NeMo Framework: RCE via unsafe object deserializationHighFeb 18, 2026
- NeMo Framework: RCE via unsafe deserializationHighFeb 18, 2026
- NeMo Framework: RCE via pickle deserializationHighFeb 18, 2026
- NeMo Framework: RCE via insecure deserializationHighFeb 18, 2026
- GPU Display Driver: Local privesc to host root (use-after-free)HighJan 28, 2026
- GPU Display Driver: Local privesc (integer overflow)HighJan 28, 2026
- GPU Display Driver: Local privesc (integer overflow)HighJan 28, 2026
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): MULTI-TENANT ISOLATION: A maliciousHighJan 28, 2026
- GPU Display Driver: DoS (null deref)MediumJan 28, 2026
- NVIDIA runx: Arbitrary command exec via shell metacharacter injectionHighJan 27, 2026
- Merlin Transformers4Rec: RCE via unsanitized inputHighJan 20, 2026
- CUDA Toolkit: Local privesc via command injectionHighJan 20, 2026
- CUDA Toolkit: Code exec via untrusted library loadHighJan 20, 2026
- CUDA Toolkit: Local privesc via command injectionHighJan 20, 2026
- CUDA Toolkit: Code exec via path manipulation on library loadMediumJan 20, 2026
- Nsight Graphics: Local code exec via command injectionHighJan 14, 2026
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): MULTI-TENANT ISOLATION: A use-after-freeHighJan 13, 2026
- NVIDIA Isaac Launchable: Hard-coded credentials in Isaac Launchable give an unauthenticated network attacker codeCriticalDec 23, 2025
- NVIDIA Isaac Launchable: Execution with unnecessary privileges lets an unauthenticated network attacker reach codeCriticalDec 23, 2025
- NVIDIA Isaac Launchable: A second over-privileged execution path with the same unauthenticated network reach and 9.8CriticalDec 23, 2025
- NVIDIA Isaac Lab: A deserialization flaw reaches code executionCriticalDec 16, 2025
- NVIDIA Resiliency Extension: Predictable log-file names in the log-aggregation path let an attacker pre-createHighDec 16, 2025
- NVIDIA NeMo Framework: Crafted data reaches code injection and privilege escalation in the job contextHighDec 16, 2025
- NVIDIA Resiliency Extension: A race condition in the checkpointing core reaches information disclosure, data tamperingHighDec 16, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreHighDec 16, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighDec 16, 2025
- NVIDIA NeMo Framework: Loading a maliciously crafted model file bypasses the framework's control mechanisms and reachesHighDec 16, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreUnscoredDec 16, 2025
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/atom): A NULL pointer dereferenceUnscoredDec 16, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)UnscoredDec 16, 2025
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A correctness defect in the amdgpu kernel driver core reachableUnscoredDec 16, 2025
- Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdgpu): MULTI-TENANT ISOLATION: An out-of-bounds accessUnscoredDec 16, 2025
- NVIDIA Merlin Transformers4Rec: The Trainer component deserializes untrusted data, reaching code executionHighDec 9, 2025
- NVIDIA NVTabular: The Workflow component deserializes untrusted data, reaching code executionHighDec 9, 2025
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu): MULTI-TENANT ISOLATION: MissingHighDec 9, 2025
- Linux kernel amdgpu user-mode queues (doorbell submission path) (drm/amdgpu): MULTI-TENANT ISOLATION: MissingUnscoredDec 9, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A NULL pointer dereference in the amdgpuUnscoredDec 9, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): MULTI-TENANT ISOLATION: Memory is handedUnscoredDec 6, 2025
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A correctness defect in the amdgpu RAS / GPU resetUnscoredDec 6, 2025
- NVIDIA TAO Toolkit: An uncontrolled search path loads an attacker-planted resource, reaching privilege escalationHighDec 3, 2025
- NVIDIA Triton Inference Server: Extra-large payloads trigger an improper-exceptional-condition check and crashHighDec 3, 2025
- NVIDIA Triton Inference Server: Improper validation of a specified quantity in input crashes the serverHighDec 3, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: An attacker with privileged access reachesCriticalNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: An attacker tampers with hardware controls directlyHighNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: An out-of-bounds write in SROOT firmware reaches codeHighNov 25, 2025
- NVIDIA NeMo Framework: Crafted data in the NLP and LLM components injects codeHighNov 25, 2025
- NVIDIA NeMo Agent Toolkit (Web UI): The chat API endpoint is vulnerable to server-side request forgery, so an attackerHighNov 25, 2025
- NVIDIA NeMo Framework: A predefined variable pulls in functionality from an untrusted control sphere, reaching codeHighNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: A second out-of-bounds write in SROOT firmwareMediumNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: An invalid memory read in OSROOT firmware crashesMediumNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: An arbitrary memory read in SROOT firmware givesMediumNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: SROOT firmware validates integrity improperly, leakingMediumNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: Improper input processing in SROOT firmware yieldsMediumNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: Unexpected memory buffer operations in SROOT firmwareMediumNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: SROOT firmware reuses a resource without clearingMediumNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: A null-pointer dereference in SROOT firmware crashesMediumNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: A second resource-reuse path in SROOT firmware leaksLowNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: Incorrect control-flow behaviour in SROOT firmwareLowNov 25, 2025
- NVIDIA DGX Spark (GB10) - SROOT / OSROOT root-of-trust firmware: A third resource-reuse path in SROOT firmware leaksLowNov 25, 2025
- NVIDIA Isaac-GR00T N1.5: A Python component injects code from crafted inputHighNov 18, 2025
- NVIDIA Isaac-GR00T N1.5: A second Python code-injection path in the same releaseHighNov 18, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreUnscoredNov 12, 2025
- NVIDIA AIStore - AuthN: A flaw in the AIStore authentication component reaches privilege escalation, informationHighNov 11, 2025
- NVIDIA Megatron-LM: A script in the repository injects code from crafted dataHighNov 11, 2025
- NVIDIA NeMo Framework: Malicious input causes improper control of code generation, reaching code executionHighNov 11, 2025
- NVIDIA NeMo Framework: Crafted data in the BERT services component injects codeHighNov 11, 2025
- NVIDIA Triton Inference Server: Extra-large payloads cause a stack overflow and kill the serverHighNov 11, 2025
- Intel Gaudi software suite (SynapseAI stack): An authenticated local user can drive the Gaudi software stackMediumNov 11, 2025
- NVIDIA AIStore - AuthN: An unauthenticated user extracts information from the AIStore authentication componentMediumNov 11, 2025
- NVIDIA Run:ai: Improper restriction of communication channels lets an attacker on an adjacent network reachMediumNov 4, 2025
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): MULTI-TENANT ISOLATION: A maliciousHighOct 23, 2025
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): Allocating a specific GPU memory resource drivesMediumOct 23, 2025
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): A null-pointer dereference in the Linux display driverMediumOct 23, 2025
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): A null-pointer dereference in a Linux driver kernelMediumOct 23, 2025
- NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): MULTI-TENANT ISOLATIONMediumOct 23, 2025
- NVIDIA ConnectX / BlueField: Privilege escalation leading to arbitrary code execution via the management interfaceMediumOct 22, 2025
- NVIDIA Isaac Lab (Isaac Sim): SB3 configuration parsing reaches code execution with no privileges and no userHighOct 14, 2025
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An uncontrolled DLL loading path in the displayHighOct 10, 2025
- GPU Display Driver: Local privesc (use-after-free)HighOct 10, 2025
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): MULTI-TENANT ISOLATION: A race condition in the LinuxHighOct 10, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreHighOct 1, 2025
- NVIDIA License System - Delegated Licensing Service (DLS): An unauthorised action against the DLS reaches highHighSep 30, 2025
- NVIDIA License System - Delegated Licensing Service (DLS): SQL injection in the DLS appliance reaching a high integrityMediumSep 30, 2025
- NVIDIA License System - Delegated Licensing Service (DLS): An authorised-looking action leads to information disclosureLowSep 30, 2025
- NVIDIA Megatron-LM: The pretrain_gpt script injects code from crafted dataHighSep 24, 2025
- NVIDIA Megatron-LM: tasks/orqa/unsupervised/nq.py injects code from crafted dataHighSep 24, 2025
- NVIDIA Megatron-LM: The msdp preprocessing script injects code from crafted dataHighSep 24, 2025
- NVIDIA Megatron-LM: The ensemble_classifier script injects code from crafted dataHighSep 24, 2025
- CUDA Toolkit: Info disclosure / DoS (buffer over-read)MediumSep 24, 2025
- CUDA Toolkit: Info disclosure (buffer over-read)MediumSep 24, 2025
- CUDA Toolkit: Code exec potential (buffer overflow)MediumSep 24, 2025
- NVIDIA CUDA Toolkit - nvdisasm: An out-of-bounds read on a malformed ELF crashes the toolLowSep 24, 2025
- NVIDIA CUDA Toolkit - cuobjdump: An out-of-bounds read on a malformed ELF crashes the toolLowSep 24, 2025
- CUDA Toolkit: Info disclosure (buffer over-read)LowSep 24, 2025
- NVIDIA CUDA Toolkit - nvdisasm: A heap-based buffer overflow on a malicious ELF gives arbitrary code executionLowSep 24, 2025
- NVIDIA CUDA Toolkit - nvdisasm: An out-of-bounds write on a malicious ELF crashes the tool and corrupts heap stateLowSep 24, 2025
- NVIDIA CUDA Toolkit - cuobjdump: A stack-based buffer overflow on a malicious ELF gives arbitrary code executionLowSep 24, 2025
- NVIDIA CUDA Toolkit - nvdisasm: Another out-of-bounds read on a malformed ELF, fixed alongside the restLowSep 24, 2025
- NVIDIA CUDA Toolkit - cuobjdump: A null-pointer dereference from an unprivileged user crashes the toolLowSep 24, 2025
- CUDA Toolkit: DoS (division by zero)LowSep 24, 2025
- Triton Inference Server: RCE / privesc via input-validation failureHighSep 17, 2025
- NVIDIA Triton Inference Server: Crafted input causes an out-of-bounds write in the serverHighSep 17, 2025
- NVIDIA Triton Inference Server: MULTI-TENANT ISOLATION: an attacker who can locate and reach the Python backend'sHighSep 17, 2025
- HGX / DGX GB200, GB300, B300 (BMC -> HMC): BMC admin can pivot to the HMC as administratorMediumSep 17, 2025
- NVIDIA Triton Inference Server: Loading a misconfigured model causes a denial of serviceMediumSep 17, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumSep 11, 2025
- NVIDIA NVDebug tool: The NVDebug diagnostic collector lets an actor gain access to a privileged account, reaching codeHighSep 9, 2025
- NVIDIA NVDebug tool: NVDebug can be induced to write files into restricted components, reaching data tamperingHighSep 9, 2025
- NVIDIA NVDebug tool: NVDebug allows an actor to run code on the platform host as a non-privileged user, reaching codeHighSep 9, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumSep 5, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumSep 5, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumSep 5, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amdgpu): A NULL pointer dereference in the amdgpu display core (DC/DM)MediumSep 5, 2025
- BlueField DPU: Access-control bypass on the DPUHighSep 4, 2025
- habanalabs kernel driver (dma-buf export path): MULTI-TENANT ISOLATION: A use-after-free in the habanalabs dma-bufHighSep 4, 2025
- NVIDIA DOCA: Local privesc via insecure file permissionsHighSep 4, 2025
- NVIDIA DOCA: Local privesc via insecure file permissionsHighSep 4, 2025
- Mellanox DPDK: DoS / data tampering via race conditionMediumSep 4, 2025
- ConnectX: Access-control flaw in NIC firmwareMediumSep 4, 2025
- Cumulus Linux: Sensitive data exposure on the switchMediumSep 4, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A NULL pointer dereference in the amdgpu powerMediumSep 4, 2025
- NVIDIA HGX / DGX (Hopper and Blackwell) - GPU VBIOS: MULTI-TENANT ISOLATION: A VBIOS misconfiguration lets an attackerMediumSep 4, 2025
- NVIDIA HGX / DGX (Hopper and Blackwell) - NVSwitch LS10 firmware: MULTI-TENANT ISOLATION: A misconfigurationMediumSep 4, 2025
- NVIDIA NeMo Curator: A malicious file processed by the data-curation pipeline injects codeHighAug 26, 2025
- NVIDIA NeMo Framework: Crafted data in the retrieval-services component injects code into the running jobHighAug 26, 2025
- NVIDIA NeMo Framework: Crafted data in the NLP component injects code into the running jobHighAug 26, 2025
- NVIDIA NeMo Framework: A second NLP-component code-injection path with the same reachHighAug 26, 2025
- NVIDIA NeMo Framework: Crafted data in the export-and-deploy component injects codeHighAug 26, 2025
- Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdgpu): MULTI-TENANT ISOLATION: A use-after-free in the amdkfdHighAug 19, 2025
- NVIDIA WebDataset: Arbitrary code execution with elevated permissions from the data-loading libraryHighAug 13, 2025
- NVIDIA Apex: A Python component injects code from a malicious fileHighAug 13, 2025
- NVIDIA Isaac-GR00T N1: A Python component injects code from crafted input into the robotics-model pipelineHighAug 13, 2025
- NVIDIA Merlin Transformers4Rec: A Python dependency permits code injection into the recommender training jobHighAug 13, 2025
- NVIDIA NeMo Framework: Deserialization of untrusted data reaches remote code execution when a crafted artifactHighAug 13, 2025
- NVIDIA NeMo Framework: Loading a .nemo file with crafted metadata injects code at model-load timeHighAug 13, 2025
- NVIDIA Megatron-LM: A code-injection flaw in the tools component executes attacker-controlled code inside the trainingHighAug 13, 2025
- NVIDIA Megatron-LM: megatron/training/arguments.py injects code from malicious inputHighAug 13, 2025
- NVIDIA Triton Inference Server: An invalid request triggers a divide-by-zero and kills the server processHighAug 6, 2025
- NVIDIA Triton Inference Server: Cancelling a stream before it is processed causes a double free and crashes the serverHighAug 6, 2025
- NVIDIA Triton Inference Server: An integer overflow on an invalid request leads to a segmentation faultHighAug 6, 2025
- NVIDIA Triton Inference Server: A second integer-overflow-to-segfault path on invalid requestsHighAug 6, 2025
- NVIDIA Triton Inference Server: Crafted input drives uncontrolled recursion and exhausts the stackHighAug 6, 2025
- NVIDIA Triton Inference Server: Crafted input causes an integer overflow and crashes the serverHighAug 6, 2025
- NVIDIA Triton Inference Server: Crafted input causes an integer overflow that reaches data tampering as well as denialHighAug 6, 2025
- NVIDIA Triton Inference Server: An invalid request drives an excessive memory allocation and a segmentation faultHighAug 6, 2025
- NVIDIA Triton Inference Server: MULTI-TENANT ISOLATION: manipulating the Python backend's shared memory region producesMediumAug 6, 2025
- NVIDIA Triton Inference Server: MULTI-TENANT ISOLATION: a crafted request causes an out-of-bounds read in the PythonMediumAug 6, 2025
- NVIDIA Triton Inference Server: A specific model configuration plus a specific input causes an underflowMediumAug 6, 2025
- GPU Display Driver: Local privesc via file permissionsHighAug 2, 2025
- vGPU Manager: Guest-to-host escape (stack buffer overflow)HighAug 2, 2025
- vGPU Manager: Guest-to-host escape (stack buffer overflow)HighAug 2, 2025
- GPU Display Driver: Access-control bypassHighAug 2, 2025
- GPU Display Driver: Local privesc (OOB write)HighAug 2, 2025
- GPU Display Driver: Local privesc (race condition)HighAug 2, 2025
- GPU Display Driver: Local privesc (use-after-free)HighAug 2, 2025
- vGPU Manager: Local privesc via file permissionsMediumAug 2, 2025
- GPU Display Driver: Info disclosure (buffer over-read)MediumAug 2, 2025
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An attacker with local access reads sensitiveLowAug 2, 2025
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): Local unprivileged access to the Windows displayLowAug 2, 2025
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): MULTI-TENANT ISOLATION: A guest canLowAug 2, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreHighJul 25, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumJul 25, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumJul 25, 2025
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A correctness defect in the amdgpu RAS / GPU resetMediumJul 25, 2025
- Container Toolkit: Container escape to host root via malicious image (LD_PRELOAD in OCI hook)CriticalJul 17, 2025
- Container Toolkit: Container escape / host file write via symlink followingHighJul 17, 2025
- Mellanox OFED: Authentication bypass in the host networking stackHighJul 17, 2025
- IGX Orin / Jetson (power mgmt): DoS / hardware damage via power-management abuseHighJul 17, 2025
- Jetson Xavier / Orin: Info disclosure via side channelMediumJul 17, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pp): A NULL pointer dereference in the amdgpu powerMediumJul 10, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumJul 9, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)MediumJul 4, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighJul 3, 2025
- NVIDIA BlueField (mlx5 ECVF): Use-after-free during ECVF vport unload in the mlx5 driverHighJul 3, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighJul 2, 2025
- Megatron-LM: Arbitrary code execution in the training jobHighJun 24, 2025
- Megatron-LM: Arbitrary code executionHighJun 24, 2025
- AIS Operator (AIStore): Improper access control on cluster storageMediumJun 24, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJun 18, 2025
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A memory or reference-count leak in the amdgpu kernel driver coreMediumJun 18, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumJun 18, 2025
- NVDebug tool: Info disclosure / privesc via diagnostic toolMediumJun 18, 2025
- CUDA Toolkit: DoS via malformed string parsingMediumMay 27, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A use-after-free in the amdgpu display core (DC/DM)HighMay 20, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumMay 20, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu): A NULL pointer dereference in the amdgpu powerMediumMay 9, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 9, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumMay 9, 2025
- TensorRT-LLM: RCE via unsafe pickle deserializationHighMay 1, 2025
- GPU Display Driver: Local privesc (insufficient access control)HighMay 1, 2025
- vGPU Manager: Local privesc via improper file permissionsMediumMay 1, 2025
- vGPU Manager: Host DoS via resource exhaustionMediumMay 1, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A division by zero in the amdgpu power managementMediumMay 1, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A division by zero in the amdgpu power managementMediumMay 1, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A division by zero in the amdgpu power managementMediumMay 1, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm/smu11): A division by zero in the amdgpu powerMediumMay 1, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A division by zero in the amdgpu power managementMediumMay 1, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A division by zero in the amdgpu power managementMediumMay 1, 2025
- NVIDIA App: Local privescHighApr 22, 2025
- NeMo Framework: RCE via insecure deserializationHighApr 22, 2025
- NeMo Framework: Arbitrary file write/read via path traversalHighApr 22, 2025
- NeMo Framework: RCEHighApr 22, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu): Missing or insufficient validation of user-suppliedMediumApr 18, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumApr 16, 2025
- Linux kernel amdgpu kernel driver core (drm/amdgpu): MULTI-TENANT ISOLATION: Memory is handed to a consumerMediumApr 2, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumApr 2, 2025
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A correctness defect in the amdgpuMediumApr 2, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A use-after-free in the amdgpu display core (DC/DM)HighApr 1, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighApr 1, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumApr 1, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumApr 1, 2025
- NVIDIA Riva: Unauthorized access to the speech service (insufficient access control)HighMar 11, 2025
- NVIDIA NeMo Framework: A relative path traversal gives arbitrary file write, reaching code executionHighMar 11, 2025
- NVIDIA Riva: Weak authenticationMediumMar 11, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu): An out-of-bounds access in the amdgpu powerHighFeb 27, 2025
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A correctness defect in the amdgpuMediumFeb 27, 2025
- Container Toolkit: Container escape to host filesystem (bypass of the CVE-2024-0132 fix)HighFeb 12, 2025
- NVIDIA Project G-Assist (Windows display driver, R580/R570): A permissions flaw in the G-Assist component that shipsHigh2025
- Altair Grid Engine (shared library loading): Grid Engine does not sanitise the environment variables that controlHigh2025
- NVIDIA Jetson Linux (UEFI): UEFI accepts a Linux Device Tree without checking authorization, so anyone who reachesHigh2025
- NVIDIA BlueField-3 RNIC/DPU - microarchitectural state and pipeline resources under containerized multi-tenancy: TENANTHigh2025
- NVIDIA Nsight Graphics (ngfx component, Windows): An ngfx component resolves a DLL from an untrusted search path, soMedium2025
- NVIDIA Jetson Linux / IGX OS (NvMap): MULTI-TENANT ISOLATION: NvMap does not track memory allocations correctly, so oneMedium2025
- Altair Grid Engine (error message handling): Grid Engine leaks password hash material in error messages. Hashes liftedMedium2025
- NVIDIA GDDR6 GPU memory (A6000-class and similar discrete GPUs): MULTI-TENANT ISOLATION: the first demonstratedUnscored2025
- NVIDIA GPUs with GDDR6 and no on-die ECC - demonstrated on RTX A6000Unscored2025
- NVIDIA GPUs with GDDR6 and no on-die ECC - demonstrated on RTX A6000Unscored2025
2022
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu): Missing or insufficient validation of user-suppliedUnscoredDec 30, 2025
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A memory or reference-count leak in the amdgpu kernel driver coreUnscoredDec 24, 2025
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A memory or reference-count leakUnscoredDec 24, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (amdgpu/pm): An out-of-bounds access in the amdgpu powerUnscoredDec 24, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu/powerplay/psm): A memory or reference-count leakUnscoredDec 8, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amdgpu): A memory or reference-count leak in the amdgpu display coreMediumOct 7, 2025
- Linux kernel amdgpu kernel driver core (drm/amdgpu): MULTI-TENANT ISOLATION: Missing or insufficient validationMediumOct 7, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 7, 2025
- Linux kernel amdgpu kernel driver core (drm/amd): A memory or reference-count leak in the amdgpu kernel driver coreMediumOct 4, 2025
- Linux kernel DRM scheduler / TTM / dma-buf shared layer used by amdgpu (drm/amdgpu): MULTI-TENANT ISOLATION: MissingHighSep 18, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJun 18, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): MULTI-TENANT ISOLATION: A use-after-freeHighJun 18, 2025
- habanalabs kernel driver (Gaudi NIC queue validation): A shift-out-of-bounds in Gaudi NIC queue validation: the driverHighJun 18, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJun 18, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A memory or reference-count leak in the amdgpu powerMediumJun 18, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A memory or reference-count leak in the amdgpu powerMediumJun 18, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A memory or reference-count leak in the amdgpu powerMediumJun 18, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A race condition or locking defect in the amdgpu displayMediumMay 1, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A double free in the amdgpu display core (DC/DM)HighFeb 26, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A use-after-free in the amdgpu power managementHighFeb 26, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumFeb 26, 2025
- habanalabs kernel driver (MMU shadow teardown): A memory leak on the habanalabs MMU teardown pathMediumFeb 26, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreMediumFeb 26, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amd/amdgpu/amdgpu_cs): A memory or reference-countMediumFeb 26, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumFeb 26, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreMediumFeb 26, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)MediumFeb 26, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu/cs): MULTI-TENANT ISOLATION: MissingMediumFeb 26, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amdgpu): An out-of-bounds access in the amdgpu display core (DC/DM)MediumFeb 26, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu/pm): A NULL pointer dereference in the amdgpu powerMediumFeb 26, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighOct 21, 2024
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): MULTI-TENANT ISOLATION: A use-after-freeHighOct 21, 2024
- Linux memory management (NUMA balancing) as used by Gaudi accelerators: Automatic NUMA balancing migrated copy-on-writeHighJul 16, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A race condition or locking defectMediumJul 16, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumJun 20, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreMediumMay 3, 2024
- GeForce Experience installer: Local privesc via symlink followingMediumFeb 12, 2023
- GeForce Experience installer: Local privesc via untrusted search pathHighFeb 7, 2023
- GeForce Experience installer: Local privesc during installMediumFeb 7, 2023
- Isaac Sim / Omniverse: Local privesc (improper input validation in config)HighJan 13, 2023
- DGX-2 BMC: RCE on BMC (buffer overflow)HighJan 13, 2023
- DGX servers BMC: Improper access control on BMCHighJan 13, 2023
- NVIDIA DGX A100 - SBIOS / SMM firmware: The SmiFlash SMM handler lets a privileged local user read, write and eraseHighJan 13, 2023
- NVIDIA DGX Station - SBIOS / SMM firmware: The same SmiFlash read/write/erase primitive on DGX Station, givingHighJan 13, 2023
- DGX servers BMC: OS command injection on BMCHighJan 13, 2023
- DGX-2 SBIOS: OS command injection in firmwareHighJan 13, 2023
- DGX-2 SBIOS: OS command injection in BIOSHighJan 13, 2023
- DGX-2 BMC: Path traversalHighJan 13, 2023
- NVIDIA DGX A100 - SBIOS / SMM firmware: An out-of-bounds write in the FsRecovery module reaches firmware code executionMediumJan 13, 2023
- DGX-2 BMC: Info disclosure via path traversalMediumJan 13, 2023
- DGX-2 BMC: Buffer overflowMediumJan 13, 2023
- DGX servers BMC: Sensitive data exposure from BMCMediumJan 13, 2023
- NVIDIA DGX A100 - SBIOS / SMM firmware: A privileged user can disable SPI flash write protection during the Pre-EFIMediumJan 13, 2023
- DGX-2 SBIOS: OOB write in BIOSMediumJan 13, 2023
- DGX-2 BMC: Path traversalMediumJan 13, 2023
- DGX servers BMC: Info exposure from BMCMediumJan 13, 2023
- DGX servers BMC: RCE on BMC (buffer overflow)HighJan 12, 2023
- DGX servers BMC: RCE on BMC (buffer overflow)HighJan 12, 2023
- DGX servers (BMC firmware < 2.09.00): RCE on BMC (buffer overflow)HighJan 11, 2023
- NVIDIA GPU Display Driver - Windows user mode layer: The user mode driver layer lets an unprivileged user readHighDec 30, 2022
- GPU Display Driver (kernel): Local privesc to host root (kernel buffer overflow)HighDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): Truncation when casting to a smaller primitive loses dataHighDec 30, 2022
- NVIDIA vGPU software - guest driver (inside tenant VM): A D-Bus configuration file shipped with the Linux vGPU guestHighDec 30, 2022
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): MULTI-TENANT ISOLATION: An unvalidatedHighDec 30, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An out-of-bounds read in the Windows driverHighDec 30, 2022
- Jetson AGX Xavier / Orin bootloader: Local privesc (stack overflow in bootloader)HighDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An out-of-bounds read in the kernel mode handler leaksHighDec 30, 2022
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): MULTI-TENANT ISOLATION: A secondHighDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An integer overflow in the kernel mode handler leaksHighDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An unprivileged user drives the kernel to useHighDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): MULTI-TENANT ISOLATION: A kernel helper maps more physicalMediumDec 30, 2022
- NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): An unprivileged userMediumDec 30, 2022
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): MULTI-TENANT ISOLATION: The Virtual GPUMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An unprivileged user forces an integer truncationMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An unhandled return value leads to a null-pointerMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): Integer truncation leads to an out-of-bounds readMediumDec 30, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): Improper validation of a display-related dataMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An unprivileged user triggers a null-pointer dereferenceMediumDec 30, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): A null-pointer dereference in the DxgkDdiEscapeMediumDec 30, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): The DxgkDdiEscape handler exposes informationMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An off-by-one error in nvidia.ko permits data tamperingMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An out-of-bounds array access in nvidia.ko givesMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): A second out-of-bounds array access path in nvidia.koMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An integer overflow in index validation defeatsMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An integer overflow in nvidia.ko produces informationMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): Another integer overflow path in nvidia.ko reachableMediumDec 30, 2022
- GPU Display Driver / vGPU guest driver: DoS / info disclosure (integer overflow)MediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An out-of-bounds array access in nvidia.ko yields denialMediumDec 30, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An integer overflow in nvidia.ko crashes the driverMediumDec 30, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): Missing data validation lets a basic user causeHighNov 19, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): Missing input validation in nvidia.ko lets a basic localHighNov 19, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An optional D-Bus configuration file shippedHighNov 19, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An out-of-bounds write in the kernel mode layerHighNov 19, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An out-of-bounds read in the kernel mode layerHighNov 19, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An out-of-bounds read through DxgkDdiEscape leaksHighNov 19, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): Any local user can null-pointer-dereferenceHighNov 19, 2022
- NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): A null-pointer dereferenceMediumNov 19, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): An out-of-bounds read through DxgkDdiEscapeMediumNov 19, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): A basic local user triggers a null-pointer dereferenceMediumNov 19, 2022
- NVIDIA CUDA Toolkit - cuobjdump: A stack-based buffer overflow on a malformed input file yields limited denialMediumNov 19, 2022
- NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): A second null-pointerMediumNov 10, 2022
- NVIDIA MLNX_DPDK: Improper error recovery in NVIDIA's DPDK distribution lets a remote attacker cause denial of serviceMediumSep 1, 2022
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): MULTI-TENANT ISOLATION: The vGPU pluginHighAug 5, 2022
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): MULTI-TENANT ISOLATION: The vGPU pluginHighAug 5, 2022
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): MULTI-TENANT ISOLATION: A null-pointerMediumAug 5, 2022
- NVIDIA DGX A100 - SBIOS / SMM firmware: An uninitialised pointer in the Ofbd SMM handler gives a privileged local userHighJul 4, 2022
- NVIDIA DGX A100 - SBIOS / SMM firmware: An integer overflow in SmmCore, chainable from another bug, reaches SMM codeHighJul 4, 2022
- NVIDIA DGX A100 - SBIOS / SMM firmware: An out-of-bounds write in the SmbiosPei module gives a highly privileged localMediumJul 4, 2022
- NVIDIA DGX A100 - SBIOS / SMM firmware: An out-of-bounds write in IpSecDxe, exploitable against a preconditioned heapMediumJul 4, 2022
- NVIDIA DGX A100 - SBIOS / SMM firmware: Improper array index validation in IpSecDxe gives firmware-phase code executionMediumJul 4, 2022
- NVIDIA DGX A100 - SBIOS / SMM firmware: The BiosCfgTool reads and writes outside its bounds in SMRAM, handingHighJul 2, 2022
- NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): MULTI-TENANT ISOLATIONHighMay 17, 2022
- NVIDIA GPU Display Driver - Windows DirectX 11 user mode driver (nvwgf2um.dll / nvwgf2umx.dll): MULTI-TENANT ISOLATIONHighMay 17, 2022
- NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): An out-of-bounds readHighMay 17, 2022
- NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): MULTI-TENANT ISOLATIONHighMay 17, 2022
- NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): An out-of-bounds writeMediumMay 17, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): Improper input validation in the DxgkDdiEscapeMediumMay 17, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): The kernel mode layer fails to release a resourceMediumMay 17, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): Improper input validation in the DxgkDdiEscapeMediumMay 17, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): A null-pointer dereference in the DxgkDdiEscapeMediumMay 17, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): Improper input validation in the DxgkDdiEscapeMediumMay 17, 2022
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): MULTI-TENANT ISOLATION: An unprivilegedMediumMay 17, 2022
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): MULTI-TENANT ISOLATIONMediumMay 17, 2022
- NVIDIA CUDA Toolkit - cuobjdump: An integer overflow reached by disassembling a corrupted fatbin gives remote codeHighMar 29, 2022
- NVIDIA DCGM - nv-hostengine: A network-reachable caller drives nv-hostengine into an unhandled error conditionMediumMar 24, 2022
- NVIDIA License System - DLS virtual appliance: Installation scripts on the DLS appliance leave other users' credentialsMediumFeb 15, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An unprivileged local user gets limited write accessMediumFeb 7, 2022
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An unprivileged local user gets limited write accessMediumFeb 7, 2022
- NVIDIA GPU Display Driver - Windows kernel mode layer (nvlddmkm.sys): A null pointer dereference created from user modeMediumFeb 7, 2022
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): MULTI-TENANT ISOLATION: A user insideMediumFeb 7, 2022
2023
- Linux kernel amdgpu display core (DC/DM) (drm/amd): An out-of-bounds access in the amdgpu display core (DC/DM)UnscoredDec 24, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)HighDec 9, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (amdgpu): MULTI-TENANT ISOLATION: An out-of-bounds accessHighDec 9, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)UnscoredDec 9, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighDec 8, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): MULTI-TENANT ISOLATION: An out-of-boundsHighOct 22, 2025
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A race condition or locking defect in the amdgpuUnscoredOct 22, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A race condition or locking defectMediumOct 7, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A NULL pointer dereference in the amdgpuHighOct 4, 2025
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A race condition or locking defectMediumOct 4, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu/gfx): A race condition or locking defect in the amdgpuHighOct 1, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 1, 2025
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A memory or reference-count leakMediumSep 18, 2025
- Linux kernel DRM scheduler / TTM / dma-buf shared layer used by amdgpu (drm/sched): MULTI-TENANT ISOLATION: MemoryMediumSep 17, 2025
- Linux kernel DRM scheduler / TTM / dma-buf shared layer used by amdgpu (drm/ttm): MULTI-TENANT ISOLATION: MissingMediumSep 17, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu): A race condition or locking defect in the amdgpuMediumSep 15, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A race condition or locking defectMediumSep 15, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A NULL pointer dereference in the amdgpuMediumSep 15, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A race condition or locking defectMediumSep 15, 2025
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A NULL pointer dereference in the amdgpu kernel driver coreMediumSep 15, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)MediumSep 15, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighMay 2, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A race condition or locking defectMediumMay 2, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)MediumMay 2, 2025
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A race condition or locking defect in the amdgpuMediumMay 2, 2025
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): MULTI-TENANT ISOLATION: A use-after-freeHighNov 19, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A NULL pointer dereference in the amdgpu kernel driver coreMediumAug 21, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A race condition or locking defectMediumAug 21, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A NULL pointer dereference in the amdgpuHighJun 20, 2024
- Linux kernel amdgpu kernel driver core (drm/amd): MULTI-TENANT ISOLATION: An out-of-bounds access in the amdgpu kernelHighMay 21, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd): An out-of-bounds access in the amdgpu power managementHighMay 21, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd): An out-of-bounds access in the amdgpu power managementMediumMay 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 21, 2024
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A NULL pointer dereference in the amdgpu RAS / GPUMediumMay 21, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu/vkms): A NULL pointer dereference in the amdgpu kernel driver coreMediumMay 21, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu): A NULL pointer dereference in the amdgpu powerMediumMay 21, 2024
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu/fence): A NULL pointer dereference in the amdgpu RASMediumMay 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 21, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A double free in the amdgpu power managementHighMay 17, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)MediumMay 17, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 17, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumMay 17, 2024
- NVIDIA nvJPEG2000 library: Improper input validation on a crafted JPEG2000 file causes a partial denial of serviceLowApr 5, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumApr 2, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)HighMar 26, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumMar 26, 2024
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A NULL pointer dereference in the amdgpu RAS / GPUMediumMar 6, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A race condition or locking defect in the amdgpu displayMediumFeb 29, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumFeb 23, 2024
- BlueField-2 / BlueField-3 DPU BMC: Code injection on DPU BMCHighJan 24, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (In the Linux kernel before 6.4.12HighJan 23, 2024
- DGX A100 BMC: Full BMC compromise (heap buffer overflow) — worst-case out-of-band takeoverCriticalJan 12, 2024
- DGX A100 BMC: RCE on BMC (stack buffer overflow)CriticalJan 12, 2024
- DGX A100 BMC: RCE on BMC (stack buffer overflow)CriticalJan 12, 2024
- DGX A100 SBIOS: Improper crypto config / UI-layer restriction in SBIOSHighJan 12, 2024
- DGX A100 SBIOS: Improper input validation in SBIOSHighJan 12, 2024
- Triton Inference Server: RCE / privesc / data tampering via model-load path traversal (`--model-control explicit`)HighJan 12, 2024
- DGX A100 BMC: Missing authentication on BMC serviceMediumJan 12, 2024
- DGX A100 SBIOS: Integer overflow in SBIOSMediumJan 12, 2024
- DGX A100 BMC: LDAP injection in BMC authMediumJan 12, 2024
- DGX A100 SBIOS: Buffer overflow in SBIOSMediumJan 12, 2024
- GPU Display Driver (Windows): Arbitrary write to privileged locations via reparse pointsHighNov 2, 2023
- GPU Display Driver (Windows): Local privesc during driver updateHighNov 2, 2023
- GPU Display Driver (Windows): Local privesc via named-pipe server accessHighNov 2, 2023
- GPU Display Driver (Windows): Arbitrary code exec via uncontrolled search pathHighNov 2, 2023
- GPU Display Driver (Linux + Windows KMD): Host DoS (null deref from unprivileged user)MediumNov 2, 2023
- GPU Display Driver (Windows): DoS / data tamperingMediumNov 2, 2023
- vGPU software (Virtual GPU Manager): Host-side DoS (null deref in vGPU Manager)MediumNov 2, 2023
- vGPU software: Guest-triggered host DoS (null deref)MediumNov 2, 2023
- GPU Display Driver / vGPU: DoS (null deref)MediumNov 2, 2023
- GPU Display Driver (Windows): DoS (untrusted pointer deref)MediumNov 2, 2023
- DGX H100 BMC (openBMC): RCE on BMC (web server plugin stack overflow)HighSep 20, 2023
- DGX H100 BMC: Privesc + code execution (web UI input validation)HighSep 20, 2023
- DGX H100 BMC (REST): Code execution + privescHighSep 20, 2023
- DGX H100 BMC (KVM daemon): Session token theft via timing side channelHighSep 20, 2023
- DGX H100 BMC (KVM): Code execution + privescHighSep 20, 2023
- DGX H100 BMC: Kernel memory corruptionHighSep 20, 2023
- DGX H100 BMC (IPMI): Credential exposureHighSep 20, 2023
- Cumulus Linux (switch OS): Cross-tenant info disclosure (VxLAN IPv6 mis-forwarding on SVI)HighSep 20, 2023
- DGX H100 BMC (IPMI): PrivescHighSep 20, 2023
- DGX H100 BMC (IPMI): DoS of the BMCMediumSep 20, 2023
- DGX H100 BMC (REST): Privesc via auth flawMediumSep 20, 2023
- Cumulus Linux (neighmgrd/nlmanager): Switch DoS via crafted packetMediumSep 20, 2023
- DGX H100 BMC (IPMI): Info disclosure of credentialsMediumSep 20, 2023
- DGX H100 BMC (REST): DoS / data tamperingMediumSep 20, 2023
- DGX H100 BMC (REST): DoS / data tamperingMediumSep 20, 2023
- DGX H100 BMC (IPMI): Info disclosureMediumSep 20, 2023
- DGX H100 BMC (REST): DoSMediumSep 20, 2023
- GeForce NOW Android app: Info disclosure / code exec via implicit intentMediumSep 20, 2023
- NVIDIA BlueField: Privilege escalation from incorrect user management on the DPUHighSep 12, 2023
- Omniverse Launcher: Access-token disclosureMediumAug 3, 2023
- DGX A100 / A800 SBIOS: Code execution + privesc in SBIOSHighJul 4, 2023
- DGX A100 / A800 SBIOS: DoS / data tampering / info disclosureHighJul 4, 2023
- NVIDIA GPU Display Driver - Linux kernel module (nvidia.ko): An unprivileged user triggers an integer overflowHighJul 4, 2023
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): MULTI-TENANT ISOLATION: The vGPU pluginHighJul 4, 2023
- CUDA Toolkit (nvdisasm): DoS (null deref via malformed ELF)LowJul 4, 2023
- NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): The driver parses unexpectedHighJun 23, 2023
- Jetson AGX Xavier / Xavier NX: Arbitrary memory R/W (PCIe controller without IOMMU)HighJun 23, 2023
- Jetson TX2 / AGX Xavier (nvbootctrl): DoS via invalid boot configMediumJun 23, 2023
- GPU Display Driver: Local privesc to host root (use-after-free)HighApr 22, 2023
- NVIDIA DGX-1 - SBIOS / SMM firmware: The Uncore PEI module never authenticates the code executed by SSA, soHighApr 22, 2023
- NVIDIA DGX-2 - SBIOS / SMM firmware: An out-of-bounds access in the OFBD SMM handler against a preconditioned heapHighApr 22, 2023
- NVIDIA DGX A100 - SBIOS / SMM firmware: The GenericSio and LegacySmmSredir SMM APIs allow arbitrary modificationHighApr 22, 2023
- NVIDIA DGX A100 - SBIOS / SMM firmware: The NVME SMM API allows arbitrary SMRAM modification, again reaching full SMMHighApr 22, 2023
- NVIDIA DGX-2 - SBIOS / SMM firmware: Privileged code can modify the ServerSetup NVRAM variable at runtime, alteringHighApr 22, 2023
- NVIDIA DGX-1 - SBIOS / SMM firmware: An out-of-bounds access in the Ofbd handler in the AMI SBIOS reaches SMM codeHighApr 22, 2023
- NVIDIA DGX-2 - SBIOS / SMM firmware: An out-of-bounds write in the Bds phase gives a privileged local user firmwareMediumApr 22, 2023
- ConnectX-5/6/6-DX NIC firmware: NIC DoS (improper exception handling)MediumApr 22, 2023
- NVIDIA GPU Display Driver - kernel mode layer (Windows nvlddmkm.sys and Linux nvidia.ko): An out-of-bounds writeMediumApr 22, 2023
- NVIDIA DGX-1 - SBIOS / SMM firmware: A flaw in the Bds phase reaches firmware code execution and privilege escalationMediumApr 22, 2023
- GPU Display Driver: DoS (null deref)MediumApr 22, 2023
- NVIDIA CUDA Toolkit - cuobjdump: An out-of-bounds read on a malformed input file reaches limited code executionMediumApr 22, 2023
- NVIDIA CUDA Toolkit - cuobjdump: A second out-of-bounds read path on malformed input with the same limitedMediumApr 22, 2023
- NVIDIA CUDA Toolkit - cuobjdump: A third out-of-bounds read path on malformed input, fixed in the same bulletinMediumApr 22, 2023
- ConnectX-5/6/6-DX NIC firmware: NIC DoS (insufficient access-control granularity)MediumApr 22, 2023
- ConnectX-5/6/6-DX NIC firmware: NIC DoSMediumApr 22, 2023
- NVIDIA CUDA Toolkit - cuobjdump: A null-pointer dereference on a malformed binary crashes the toolLowApr 22, 2023
- NVIDIA CUDA Toolkit - cuobjdump: A division-by-zero on crafted input crashes the toolLowApr 22, 2023
- GPU Display Driver: Local privesc to host root (use-after-free)HighApr 1, 2023
- NVIDIA DCGM - nv-hostengine: A heap-based buffer overflow reachable through the bound socket gives denial of serviceHighApr 1, 2023
- GPU Display Driver: Local privesc to host root (kernel buffer overflow)HighApr 1, 2023
- GPU Display Driver (GeForce/RTX/Quadro/Tesla/vGPU): Info disclosure + DoS (OOB read in kernel driver)HighApr 1, 2023
- GPU Display Driver: Local privesc / data tampering (missing access control)HighApr 1, 2023
- GPU Display Driver: Local privesc (kernel buffer overflow)HighApr 1, 2023
- GPU Display Driver: Local privesc / data tampering (OOB write)HighApr 1, 2023
- GPU Display Driver: DoS / data tampering (integer underflow)MediumApr 1, 2023
- GPU Display Driver: Local privesc (kernel buffer overflow)MediumApr 1, 2023
- GPU Display Driver: DoS (GPU firmware buffer overflow)MediumApr 1, 2023
- GPU Display Driver: Info disclosure (OOB read)MediumApr 1, 2023
- GPU Display Driver: DoS (stack overflow)MediumApr 1, 2023
- vGPU Manager (Cloud Gaming): Guest-triggered host DoS (null deref)MediumApr 1, 2023
- GPU Display Driver: Improper privilege managementMediumApr 1, 2023
- GPU Display Driver: Physical memory accessLowApr 1, 2023
- GPU Display Driver: Physical memory disclosureLowApr 1, 2023
- CUDA Toolkit: DoS / info disclosure (buffer over-read in cuobjdump)MediumMar 10, 2023
- CUDA Toolkit: DoS (null deref)LowMar 2, 2023
- Integrated GPU graphics data compression (Intel, AMD, Apple, Arm, Qualcomm, NVIDIA): MULTI-TENANT ISOLATION: GPUs applyUnscored2023
- NVIDIA Confidential Computing (H100/H200/B100/B200/GB200) - CC-DevTools operating mode: MULTI-TENANT ISOLATION: NVIDIAUnscored2023
2024
- Intel Gaudi software installer: The Gaudi software installer leaves files and directories with permissions that letHighMay 14, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu): A NULL pointer dereference in the amdgpu powerMediumMar 6, 2025
- Hopper HGX 8-GPU (HMC/firmware): Improper input validation in baseboard firmwareHighMar 5, 2025
- Hopper HGX 8-GPU: DoS (inadequate loop termination in firmware)MediumMar 5, 2025
- IGX Orin bootloader: Improper access control in bootloaderHighFeb 25, 2025
- CUDA Toolkit: Info disclosure (OOB read)LowFeb 25, 2025
- CUDA Toolkit: Info disclosure (OOB read)LowFeb 25, 2025
- CUDA Toolkit: Info disclosure (OOB read)LowFeb 25, 2025
- CUDA Toolkit: Info disclosure (OOB read)LowFeb 25, 2025
- CUDA Toolkit: Info disclosure (OOB read)LowFeb 25, 2025
- CUDA Toolkit: Info disclosure (OOB read)LowFeb 25, 2025
- CUDA Toolkit: Info disclosure (OOB read)LowFeb 25, 2025
- CUDA Toolkit: DoS (null deref)LowFeb 25, 2025
- CUDA Toolkit: DoS (improper type checking)LowFeb 25, 2025
- CUDA Toolkit: DoS (improper type checking)LowFeb 25, 2025
- IGX Orin / Jetson AGX Orin: Privesc / DoSHighFeb 12, 2025
- nvJPEG2000: Code exec via OOB write on malicious imageMediumFeb 12, 2025
- nvJPEG2000: Code exec via OOB writeMediumFeb 12, 2025
- nvJPEG2000: Code exec via buffer overflowMediumFeb 12, 2025
- nvJPEG2000: Code exec via heap overflowMediumFeb 12, 2025
- Triton Inference Server: DoS (integer overflow)MediumFeb 12, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)MediumFeb 10, 2025
- GPU Display Driver: Info disclosure (OOB kernel memory access)MediumFeb 2, 2025
- vGPU Manager: Guest-to-host escape via GPU firmware buffer overflowHighJan 28, 2025
- Container Toolkit / GPU Operator: Container escape to host root (insufficient input validation)HighJan 28, 2025
- Container Toolkit / GPU Operator: Container escape to host (insufficient input validation)HighJan 28, 2025
- GPU Display Driver: Local privesc (kernel driver buffer overflow)HighJan 28, 2025
- RAPIDS cuDF / cuML: RCE via unsafe deserializationMediumJan 28, 2025
- Container Toolkit / GPU Operator: Host DoS / info disclosureMediumJan 28, 2025
- GPU Display Driver: DoS (use-after-free)MediumJan 28, 2025
- GPU Display Driver: Info disclosure (missing initialization)MediumJan 28, 2025
- vGPU Manager: Host DoS (missing error handling)MediumJan 28, 2025
- GPU Display Driver: Info disclosure (OOB read)LowJan 28, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A race condition or locking defect in the amdgpu displayHighJan 19, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amdgpu): Missing or insufficient validation of user-supplied parametersHighJan 19, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)MediumJan 19, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)MediumJan 19, 2025
- Linux kernel DRM scheduler / TTM / dma-buf shared layer used by amdgpu (drm/amdgpu): A NULL pointer dereferenceMediumJan 11, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A double free in the amdgpu display core (DC/DM)HighJan 8, 2025
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJan 8, 2025
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/gfx9): A memory or reference-count leakMediumDec 29, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): An out-of-bounds access in the amdgpuMediumDec 28, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): MULTI-TENANT ISOLATION: A use-after-free in the amdgpu kernelHighDec 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighDec 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumDec 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumDec 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreMediumDec 27, 2024
- Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdgpu): MULTI-TENANT ISOLATION: Missing or insufficientMediumDec 27, 2024
- UFM Enterprise / UFM Appliance / UFM CyberAI: Fabric-manager privesc, data corruption, service disruption via improperHighDec 6, 2024
- Base Command Manager (Linux): Local privesc via insecure temporary file handlingMediumDec 6, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)HighDec 4, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighDec 2, 2024
- Base Command Manager (CMDaemon): Unauthenticated RCE on the cluster managerCriticalNov 23, 2024
- NVIDIA License System - Delegated Licensing Service (DLS): An unauthorised action against the DLS reaches partialHighNov 23, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): MULTI-TENANT ISOLATION: An out-of-boundsHighNov 19, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A NULL pointer dereference in the amdgpuMediumNov 19, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (platform/x86/amd/pmc): A correctness defect in the amdgpu powerMediumNov 19, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): An out-of-bounds access in the amdgpu powerHighNov 9, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)MediumNov 8, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amd): A NULL pointer dereference in the amdgpuHighNov 5, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A race condition or locking defect in the amdgpu displayMediumNov 5, 2024
- Container Toolkit / GPU Operator: Unauthorized file creation on the host (data tampering)MediumNov 5, 2024
- ConnectX / BlueField firmware: Improper certificate validationHighNov 1, 2024
- BlueField / ConnectX firmware: Improper certificate validation / access controlHighNov 1, 2024
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): MULTI-TENANT ISOLATION: A privilegedHighOct 26, 2024
- NVIDIA GPU Display Driver - Windows user mode layer: An out-of-bounds read in the Windows user mode driver layer chainsHighOct 26, 2024
- NVIDIA GPU Display Driver - Windows user mode layer: A second out-of-bounds read in the Windows user mode driver layerHighOct 26, 2024
- NVIDIA GPU Display Driver - Windows user mode layer: A third out-of-bounds read in the Windows user mode driver layerHighOct 26, 2024
- NVIDIA GPU Display Driver - Windows user mode layer: A fourth out-of-bounds read in the Windows user mode driver layerHighOct 26, 2024
- NVIDIA GPU Display Driver - Windows user mode layer: A fifth out-of-bounds read in the Windows user mode driver layerHighOct 26, 2024
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): MULTI-TENANT ISOLATION: A tenantHighOct 26, 2024
- NVIDIA vGPU software - Virtual GPU Manager (host-side vGPU plugin / nvidia.ko): MULTI-TENANT ISOLATION: The host vGPUHighOct 26, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A double free in the amdgpu display core (DC/DM)HighOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A NULL pointer dereference in the amdgpu powerMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)MediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)MediumOct 21, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A NULL pointer dereference in the amdgpu kernel driver coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)MediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Memory is handed to a consumer without being initialisedMediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumOct 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumOct 21, 2024
- NVIDIA NeMo: SaveRestoreConnector extracts .tar archives unsafely, so a crafted archive writes files outsideMediumOct 15, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)HighOct 9, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)MediumOct 9, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumOct 9, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A race condition or locking defect in the amdgpu displayMediumOct 9, 2024
- NVIDIA CUDA Toolkit - nvdisasm: Improper input validation on a malicious ELF crashes the disassemblerLowOct 3, 2024
- NVIDIA CUDA Toolkit - nvdisasm: A use-after-free on a malformed ELF causes a crash and potentially worse dependingLowOct 3, 2024
- NVIDIA CUDA Toolkit - nvdisasm: A null-pointer dereference on a malformed ELF crashes the disassemblerLowOct 3, 2024
- NVIDIA Triton Inference Server: An out-of-bounds read triggered by releasing a shared memory region while it is stillMediumOct 1, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)HighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighSep 27, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/vcn): A correctness defect in the amdgpuHighSep 27, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): An out-of-bounds access in the amdgpu powerHighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreHighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)HighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumSep 27, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A NULL pointer dereference in the amdgpu kernel driver coreMediumSep 27, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A correctness defect in the amdgpu kernel driver core reachableMediumSep 27, 2024
- Linux kernel amdgpu kernel driver core (drm/amd/amdgpu): MULTI-TENANT ISOLATION: Missing or insufficient validationMediumSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumSep 27, 2024
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A correctness defect in the amdgpu RAS / GPU resetMediumSep 27, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A correctness defect in the amdgpuMediumSep 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumSep 27, 2024
- Container Toolkit: Container escape to host filesystem via TOCTOU in the **default** configurationCriticalSep 26, 2024
- Container Toolkit: Unauthorized empty-file creation on the hostMediumSep 26, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): MULTI-TENANT ISOLATION: An out-of-bounds access in the amdgpuHighSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)HighSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighSep 18, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): MULTI-TENANT ISOLATION: An out-of-bounds access in the amdgpuHighSep 18, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): MULTI-TENANT ISOLATION: An out-of-bounds access in the amdgpuHighSep 18, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): MULTI-TENANT ISOLATION: An out-of-bounds access in the amdgpuHighSep 18, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): An out-of-bounds access in the amdgpu powerHighSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumSep 18, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A NULL pointer dereference in the amdgpu kernel driver coreMediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)MediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)MediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)MediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumSep 18, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumSep 13, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): MULTI-TENANT ISOLATION: An out-of-bounds access in the amdgpuHighSep 4, 2024
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A correctness defect in the amdgpu RAS / GPU resetMediumSep 4, 2024
- CUDA Toolkit: Memory-safety issueMediumAug 31, 2024
- CUDA Toolkit: OOB writeMediumAug 31, 2024
- CUDA Toolkit: Info disclosure (OOB read)LowAug 31, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumAug 26, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedMediumAug 26, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumAug 26, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumAug 26, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumAug 26, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A NULL pointer dereference in the amdgpu powerMediumAug 26, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu/pm): A NULL pointer dereference in the amdgpu powerMediumAug 26, 2024
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): A NULL pointer dereference in the amdgpu RAS / GPUMediumAug 26, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu/pm): A NULL pointer dereference in the amdgpu powerMediumAug 26, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumAug 17, 2024
- NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2/MetroX-3 XC: A crafted URI causes CGI path traversal in the switch webHighAug 12, 2024
- NVIDIA CV-CUDA: A long-running CV-CUDA Python process consumes resources without bound, ending in denial of serviceMediumAug 12, 2024
- Jetson (Xavier/TX/Nano): Improper error handlingHighAug 8, 2024
- GPU Display Driver: Local privesc (buffer over-read in driver)HighAug 8, 2024
- Mellanox OS / MetroX / Onyx / Skyway: Switch/gateway DoS (improper input validation)HighAug 8, 2024
- Mellanox OS / MetroX / Onyx / Skyway: Improper access control on switch mgmtMediumAug 8, 2024
- CUDA Toolkit: Info disclosure (OOB read)LowAug 8, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighJul 30, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighJul 30, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighJul 30, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighJul 30, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighJul 30, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A double free in the amdgpu firmware, ACPIHighJul 30, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): MULTI-TENANT ISOLATION: Memory is handed to a consumerHighJul 30, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumJul 30, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumJul 30, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJul 29, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)HighJul 29, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A correctness defect in the amdgpuHighJul 29, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A correctness defect in the amdgpu kernel driver core reachableMediumJul 29, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A NULL pointer dereference in the amdgpuHighJul 16, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu): A correctness defect in the amdgpu power managementMediumJul 12, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): An out-of-bounds access in the amdgpuHighJun 25, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): An out-of-bounds access in the amdgpuHighJun 24, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu/mes): A use-after-free in the amdgpuHighJun 19, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighJun 19, 2024
- Triton Inference Server: Improper logging of security events (audit gap)CriticalJun 13, 2024
- vGPU Manager: Guest-to-host privescHighJun 13, 2024
- GPU Display Driver: Local privesc (improper resource validation / uninit memory)HighJun 13, 2024
- GPU Display Driver: Local privesc to host root (OOB write)HighJun 13, 2024
- GPU Display Driver: Local privesc to host root (use-after-free)HighJun 13, 2024
- vGPU Manager: Guest-to-host escape (buffer overflow)HighJun 13, 2024
- vGPU Manager: Cross-tenant info disclosureMediumJun 13, 2024
- vGPU Manager: Improper permission managementMediumJun 13, 2024
- vGPU Manager: Host DoS (null deref)MediumJun 13, 2024
- GPU Display Driver: DoSMediumJun 13, 2024
- vGPU Manager: Host resource exhaustion / DoSMediumJun 13, 2024
- Triton Inference Server: Insufficient access-control granularityMediumJun 13, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)MediumJun 8, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighMay 30, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A correctness defect in the amdgpu power managementMediumMay 30, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 30, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A race condition or locking defect in the amdgpu displayMediumMay 30, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A race condition or locking defectHighMay 19, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A correctness defect in the amdgpuHighMay 17, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A race condition or locking defectMediumMay 17, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 17, 2024
- Triton Inference Server: RCE via path traversal on the model-load APICriticalMay 14, 2024
- Linux kernel DRM scheduler / TTM / dma-buf shared layer used by amdgpu (drm/amdgpu): A NULL pointer dereferenceHighMay 14, 2024
- ChatRTX: Local privescHighMay 14, 2024
- ChatRTX: Local privescHighMay 14, 2024
- Triton Inference Server: Info disclosure via path traversalMediumMay 14, 2024
- Triton Inference Server: DoS (stack buffer overflow)MediumMay 14, 2024
- ChatRTX: Unencrypted credential storageMediumMay 14, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): MULTI-TENANT ISOLATION: An out-of-bounds access in the amdgpuHighMay 1, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighMay 1, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 1, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu/pm): A NULL pointer dereference in the amdgpu powerMediumMay 1, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 1, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 1, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMay 1, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): MULTI-TENANT ISOLATION: MissingHighApr 23, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighApr 17, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighApr 17, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreMediumApr 17, 2024
- Linux kernel amdgpu RAS / GPU reset and recovery path (drm/amdgpu): MULTI-TENANT ISOLATION: An out-of-bounds accessMediumApr 17, 2024
- ChatRTX: Local privescHighApr 8, 2024
- ChatRTX: XSSMediumApr 8, 2024
- CUDA Toolkit: DoS (null deref)LowApr 5, 2024
- CUDA Toolkit: Info disclosure (buffer over-read)LowApr 5, 2024
- nvTIFF library: DoS via malformed imageLowApr 5, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighApr 4, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighApr 3, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Missing or insufficient validation of user-suppliedHighApr 3, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumApr 3, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumApr 3, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumApr 3, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): MULTI-TENANT ISOLATION: A use-after-freeHighApr 2, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu): A NULL pointer dereference in the amdgpu powerHighApr 2, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighApr 2, 2024
- Linux kernel DRM scheduler / TTM / dma-buf shared layer used by amdgpu (drm/sched): A NULL pointer dereferenceMediumApr 2, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A correctness defect in the amdgpu display core (DC/DM)MediumApr 2, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumApr 2, 2024
- GPU Display Driver: Local privesc (kernel buffer over-read)HighMar 27, 2024
- GPU Display Driver: Local privesc (improper privilege management)HighMar 27, 2024
- vGPU Manager: Guest-to-host privesc (improper privilege management)HighMar 27, 2024
- GPU Display Driver: Local privesc / data tampering (OOB write)HighMar 27, 2024
- GPU Display Driver: DoS (null deref)MediumMar 27, 2024
- vGPU Manager: Guest-triggered host DoSMediumMar 27, 2024
- GPU Display Driver: DoS (null deref)MediumMar 27, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMar 26, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreMediumMar 26, 2024
- Linux kernel amdgpu firmware, ACPI and IP-block initialisation (drm/amdgpu): A NULL pointer dereference in the amdgpuMediumMar 26, 2024
- BIOS firmware on Supermicro X11DPG-HGX2, X11PDG-QT, X11PDG-OT and X11PDG-SN before version 4.4: An arbitrary memoryHigh2024
- NVIDIA GPUDirect RDMA - GPU BAR1 window peer-mapped to the RNIC, nvidia-peermem / nvidia_p2p_get_pages: TENANTHigh2024
- NVIDIA Remote Attestation Service (NRAS) / NVIDIA attestation SDK: Verifying an NVIDIA GPU attestation reportUnscored2024
2021
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A memory or reference-count leak in the amdgpu powerMediumFeb 26, 2025
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A memory or reference-count leak in the amdgpu powerMediumFeb 26, 2025
- Linux kernel amdgpu kernel driver core (drm/amd/amdgpu): A memory or reference-count leak in the amdgpu kernel driverMediumMay 24, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amdgpu): An out-of-bounds access in the amdgpu display core (DC/DM)HighMay 22, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): Memory is handed to a consumer without being initialisedCriticalMay 21, 2024
- Linux kernel amdgpu kernel driver core (drm/amdgpu): A race condition or locking defect in the amdgpu kernel driverHighMay 21, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreMediumMay 21, 2024
- Linux kernel amdgpu power management (SMU/powerplay) (drm/amd/pm): A NULL pointer dereference in the amdgpu powerMediumMay 21, 2024
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A memory or reference-count leakMediumMay 21, 2024
- Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdgpu): MULTI-TENANT ISOLATION: A use-after-free in the amdkfdHighMar 25, 2024
- habanalabs kernel driver (gaudi_memset_device_memory): Use-after-free in the Gaudi device-memory memset pathHighMar 1, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): An out-of-bounds access in the amdgpu display core (DC/DM)HighFeb 28, 2024
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreMediumFeb 28, 2024
- NVIDIA GPU firmware microcontroller (Falcon): MULTI-TENANT ISOLATION: a privileged user can craft microcodeHighNov 20, 2021
- NVIDIA GPU firmware microcontroller (Falcon): MULTI-TENANT ISOLATION: a privileged user can time a DMA writeHighNov 20, 2021
- NVIDIA GPU firmware microcontroller (Falcon): MULTI-TENANT ISOLATION: debug mechanisms in the GPU's internalMediumNov 20, 2021
- NVIDIA GPU firmware microcontroller (Falcon): MULTI-TENANT ISOLATION: debug registers on the GPU's internalMediumNov 20, 2021
- NVIDIA GPU firmware microcontroller (Falcon): MULTI-TENANT ISOLATION: program data in the GPU's internalMediumNov 20, 2021
- NVIDIA GPU firmware microcontroller (Falcon): MULTI-TENANT ISOLATION: loading crafted microcode gives a privileged userMediumNov 20, 2021
- NVIDIA GPU firmware microcontroller (Falcon): MULTI-TENANT ISOLATION: registers in the GPU's internal microcontrollerMediumNov 20, 2021
- NVIDIA GPU firmware microcontroller (Falcon): MULTI-TENANT ISOLATION: unscrubbed microcontroller memory leaks dataMediumNov 20, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: the guest OS can execute privileged operations throughHighOct 29, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: double free in the vGPU Manager that NVIDIA explicitlyHighOct 29, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: a guest-supplied string may not be null-terminatedHighOct 29, 2021
- NVIDIA vGPU Manager kernel module (nvidia.ko, host): MULTI-TENANT ISOLATION: one vGPU can starve the other vGPUs hostedMediumOct 29, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: guest-reachable NULL dereference in the vGPU plugin causingMediumOct 29, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: a guest can deadlock the vGPU pluginMediumOct 29, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): NULL dereference reachable through private IOCTLs, with NVIDIA notingMediumOct 27, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): A NULL pointer created in user-mode code is dereferencedMediumOct 27, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Improper input validation in the escape handler under specificMediumOct 27, 2021
- RISC-V ISA (MTVEC register) as used in NVIDIA GPU microcontrollers: A documented ambiguity in the RISC-V specificationCriticalAug 13, 2021
- NVIDIA DCGM (nv-hostengine, DIAG module): Any local user can inject a shared library into the DCGM serverHighAug 13, 2021
- NVIDIA GPU Display Driver for Windows, nvidia-smi: nvidia-smi loads DLLs from an uncontrolled pathHighJul 22, 2021
- NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): Out-of-bounds read or write in the kernel-modeHighJul 22, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Hard-link attack: an unprivileged user makes the driver overwriteHighJul 22, 2021
- NVIDIA GPU Display Driver, GPU firmware: An attacker-triggerable assert in GPU firmware aborts harder than it needsMediumJul 22, 2021
- NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): Out-of-bounds array access in the escape handlerMediumJul 22, 2021
- NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): All control calls with embedded parametersMediumJul 22, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): NULL dereference in the escape handler causing a system crashMediumJul 22, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: the vGPU Manager trusts a length field in a guest requestHighJul 21, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: the vGPU Manager fails to release resources on guest driverHighJul 21, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: stack buffer overflow in the vGPU Manager with enoughHighJul 21, 2021
- NVIDIA vGPU Manager kernel module (nvidia.ko, host): MULTI-TENANT ISOLATION: the host vGPU kernel module dereferencesMediumJul 21, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: NULL dereference in the vGPU plugin, guest-reachableMediumJul 21, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: guest input drives the vGPU plugin into a floating-pointMediumJul 21, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: another guest-reachable NULL dereference in the vGPU pluginMediumJul 21, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: unvalidated guest input in the vGPU Manager plugin givingHighApr 29, 2021
- NVIDIA vGPU software (guest kernel-mode driver + vGPU plugin): MULTI-TENANT ISOLATION: unvalidated lengthHighApr 29, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: unvalidated input length in the vGPU Manager pluginHighApr 29, 2021
- NVIDIA vGPU software (guest kernel-mode driver + vGPU plugin): MULTI-TENANT ISOLATION: unvalidated lengthHighApr 29, 2021
- NVIDIA vGPU software (guest kernel-mode driver + vGPU plugin): MULTI-TENANT ISOLATION: another unvalidated-length pathHighApr 29, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: the guest can write to a shared memory locationHighApr 29, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: the vGPU Manager lets guests control resources theyHighApr 29, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: information retrievable by a guest that defeats ASLRMediumApr 29, 2021
- NVIDIA GPU Display Driver for Windows, installer: A race between the installer's integrity check and execution letsHighApr 21, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Use of a dangling pointer in the escape handler, rated code-executionHighApr 21, 2021
- NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): Improper access control in the kernel-mode layerMediumApr 21, 2021
- NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): Reference-count mishandling on a driver resourceMediumApr 21, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): NULL dereference in nvlddmkm.sys leading to a system crashMediumApr 21, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): A local user gets elevated enough to rewrite display configurationHighJan 8, 2021
- NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): User-mode clients can reach legacy privileged APIsHighJan 8, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: the vGPU plugin lets guests allocate resources theyHighJan 8, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: unvalidated guest index leads to integer overflowHighJan 8, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: unvalidated offset produces a buffer overread in the hostHighJan 8, 2021
- NVIDIA Linux GPU Display Driver (nvidia.ko): MULTI-TENANT ISOLATION: nvidia.ko does not fully honour filesystemHighJan 8, 2021
- NVIDIA vGPU software (guest kernel-mode driver + vGPU plugin): MULTI-TENANT ISOLATION: unvalidated input sizeHighJan 8, 2021
- NVIDIA vGPU software (guest kernel-mode driver + vGPU plugin): MULTI-TENANT ISOLATION: unvalidated indexHighJan 8, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: unvalidated guest-supplied length in the vGPU pluginHighJan 8, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: the plugin takes a value from the guest, castsHighJan 8, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: unvalidated guest input in the vGPU plugin leading to hostHighJan 8, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: the plugin keeps using a resource it validatedMediumJan 8, 2021
- NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): Improper validation of a user-supplied pointerMediumJan 8, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Missing authorization check in the escape handlerMediumJan 8, 2021
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: unvalidated guest input causes unbounded resourceMediumJan 8, 2021
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Improper access control in the escape handler leaks informationMediumJan 8, 2021
2023-2026
2020
- NVIDIA CUDA Toolkit, nvJPEG library: Out-of-bounds read/write in nvJPEG while decoding an image, rated code-executionHighOct 30, 2020
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): A securely loaded system DLL then loads its own dependenciesHighOct 2, 2020
- NVIDIA Windows GPU Display Driver, DirectX 11 user-mode driver (nvwgf2um.dll): Crafted shader triggers an out-of-boundsHighOct 2, 2020
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: use-after-free while releasing resources in the vGPU pluginHighOct 2, 2020
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: parameters stay writable by the guest after the pluginHighOct 2, 2020
- NVIDIA vGPU Manager (vGPU plugin + host kernel module): MULTI-TENANT ISOLATION: the host can be made to write outsideHighOct 2, 2020
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: guest-supplied length not validated, allowing host-side dataHighOct 2, 2020
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: double free in the vGPU plugin, guest-triggeredHighOct 2, 2020
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: guest-supplied size not validated in the vGPU pluginMediumOct 2, 2020
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: NULL dereference in the vGPU plugin reachable from a guestMediumOct 2, 2020
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): No rate limiting in the kernel-mode scheduler: a local process floodsMediumOct 2, 2020
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: the vGPU plugin fails to bound an indexed or pointer-basedHighJun 30, 2020
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: out-of-bounds read in the vGPU plugin that NVIDIA ratesHighJun 30, 2020
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: guest-supplied data size is not validated, letting a tenantHighJun 30, 2020
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: uninitialised local pointers later freed in the vGPU pluginHighJun 30, 2020
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: time-of-check to time-of-use on a shared resourceMediumJun 30, 2020
- NVIDIA vGPU software (guest kernel-mode driver + vGPU plugin): MULTI-TENANT ISOLATION: the vGPU plugin lets guest codeMediumJun 30, 2020
- NVIDIA GPU Display Driver, inter-process communication APIs: Improper access control on the driver's IPC surface givesHighJun 25, 2020
- NVIDIA GPU Display Driver service host component: The service host can skip its integrity check on applicationHighJun 25, 2020
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): NULL dereference in the escape handlerHighJun 25, 2020
- NVIDIA Windows GPU Display Driver, DirectX 11 user-mode driver (nvwgf2um.dll): A crafted shader causes an out-of-boundsMediumJun 25, 2020
- NVIDIA Linux GPU Display Driver, UVM driver (nvidia-uvm.ko): A race in the Unified Virtual Memory kernel module letsMediumJun 25, 2020
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: unvalidated guest-supplied index in the vGPU pluginMediumMar 12, 2020
- NVIDIA vGPU Manager kernel module (nvidia.ko, host): MULTI-TENANT ISOLATION: NULL dereference in the host-sideMediumMar 12, 2020
- NVIDIA vGPU guest graphics driver: Bad cleanup on a failure path in the guest driver crashes the tenant's own VMMediumMar 12, 2020
- NVIDIA Multi-Instance GPU (MIG) partitioning: MULTI-TENANT ISOLATION: MIG gives each instance its own SM slice, L2Unscored2020
2019
- NVIDIA NVFlash / NVUFlash / GPUModeSwitch kernel driver (nvflash.sys, nvflsh32/64.sys): MULTI-TENANT ISOLATIONMediumNov 18, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): The escape handler does not validate input buffer sizeHighNov 9, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): NULL dereference in the escape handlerHighNov 9, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Untrusted array index used in the escape handler: an unprivilegedHighNov 9, 2019
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: the vGPU Manager grants a guest access to memory the guestHighNov 9, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Uninitialised pointer use in nvlddmkm.sys. Local denial of serviceMediumNov 9, 2019
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: a guest VM hands the vGPU Manager a wrongly sized bufferMediumNov 9, 2019
- NVIDIA vGPU Manager (vGPU plugin): MULTI-TENANT ISOLATION: an index value from the guest is not validated by the vGPUMediumNov 9, 2019
- NVIDIA Windows GPU Display Driver, DirectX driver (shader compiler/runtime): MULTI-TENANT ISOLATION: a crafted shaderCriticalAug 6, 2019
- NVIDIA Windows GPU Display Driver, DirectX driver (shader compiler/runtime): A crafted shader overruns a shader-localCriticalAug 6, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Hard-link attack on the user-mode video driver's trace loggerHighAug 6, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): A kernel object created by the escape handler gets defaultHighAug 6, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): The escape handler relies on invariants that are not guaranteed, soMediumAug 6, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Unsynchronized shared state (static variables across threads)HighMay 10, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): The driver loads Windows system DLLs without validating pathMediumMay 10, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Out-of-bounds read in the DeviceIoControl handlerMediumMay 10, 2019
- NVIDIA Windows GPU Display Driver, 3D Vision stereo service: A privileged NVIDIA service opens files without checkingHighFeb 27, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): The context-creation DDI uses an untrusted array indexHighFeb 27, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): NULL dereference in the page-table DDI handler, reachable locallyHighFeb 27, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): NULL dereference in the virtual command submission handlerHighFeb 27, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Out-of-bounds kernel buffer access through the escape handlerHighFeb 27, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Same escape-handler length bug but with information disclosureHighFeb 27, 2019
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Resource leak in the escape handlerMediumFeb 27, 2019
2018
- NVIDIA GPU Display Driver, GPU hardware performance counters: MULTI-TENANT ISOLATION: GPU performance countersMediumNov 13, 2018
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Any local account on a Windows GPU host can call the driver's escapeHighApr 2, 2018
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Out-of-bounds kernel read/write from an unprivileged escape callHighApr 2, 2018
- NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): NULL dereference in the kernel-mode layer reachableHighApr 2, 2018
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Same class as the other early-2018 escape bugs: an unprivilegedHighApr 2, 2018
- NVIDIA Windows GPU Display Driver, DirectX 10 user-mode driver: A crafted pixel shader writes into unallocated memoryHighApr 2, 2018
- NVIDIA Windows GPU Display Driver (nvlddmkm.sys): The escape handler exposes functionality that should neverMediumApr 2, 2018
- NVIDIA GPU Display Driver, DirectX and OpenGL user-mode drivers: A crafted pixel shader drives the user-mode driverMediumApr 2, 2018
- Univa Grid Engine (execd spooling with Docker jobs on root_squash): MULTI-TENANT ISOLATION: In the specific combinationCritical2018