Vulnerabilities > Nvidia > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-01-12 CVE-2023-31032 Improper Control of Dynamically-Managed Code Resources vulnerability in Nvidia DGX A100 Firmware 1.18/1.8
NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a dynamic variable evaluation by local access.
local
low complexity
nvidia CWE-913
5.5
2023-11-02 CVE-2023-31018 NULL Pointer Dereference vulnerability in Nvidia Virtual GPU
NVIDIA GPU Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a NULL-pointer dereference, which may lead to denial of service.
local
low complexity
nvidia CWE-476
5.5
2023-11-02 CVE-2023-31021 NULL Pointer Dereference vulnerability in Nvidia Virtual GPU
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a malicious user in the guest VM can cause a NULL-pointer dereference, which may lead to denial of service.
local
low complexity
nvidia CWE-476
5.5
2023-11-02 CVE-2023-31022 NULL Pointer Dereference vulnerability in Nvidia Virtual GPU
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a NULL-pointer dereference may lead to denial of service.
local
low complexity
nvidia CWE-476
5.5
2023-11-02 CVE-2023-31023 Unspecified vulnerability in Nvidia Virtual GPU
NVIDIA Display Driver for Windows contains a vulnerability where an attacker may cause a pointer dereference of an untrusted value, which may lead to denial of service.
local
low complexity
nvidia
5.5
2023-11-02 CVE-2023-31026 NULL Pointer Dereference vulnerability in Nvidia Virtual GPU
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a NULL-pointer dereference may lead to denial of service.
local
low complexity
nvidia CWE-476
5.5
2023-09-27 CVE-2023-44216 Information Exposure Through Discrepancy vulnerability in multiple products
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue.
5.3
2023-09-20 CVE-2023-31014 Exposure of Resource to Wrong Sphere vulnerability in Nvidia Geforce NOW 6.00.32705137/6.04.33108832
NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer component.
local
low complexity
nvidia CWE-668
4.8
2023-09-20 CVE-2023-25526 Unspecified vulnerability in Nvidia Cumulus Linux
NVIDIA Cumulus Linux contains a vulnerability in neighmgrd and nlmanager where an attacker on an adjacent network may cause an uncaught exception by injecting a crafted packet.
low complexity
nvidia
6.5
2023-08-03 CVE-2023-25524 Unspecified vulnerability in Nvidia Omniverse Launcher
NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar.
network
low complexity
nvidia
5.3