Vulnerabilities > Nvidia > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-11-02 CVE-2023-31023 Unspecified vulnerability in Nvidia Virtual GPU
NVIDIA Display Driver for Windows contains a vulnerability where an attacker may cause a pointer dereference of an untrusted value, which may lead to denial of service.
local
low complexity
nvidia
5.5
2023-11-02 CVE-2023-31026 NULL Pointer Dereference vulnerability in Nvidia Virtual GPU
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a NULL-pointer dereference may lead to denial of service.
local
low complexity
nvidia CWE-476
5.5
2023-09-27 CVE-2023-44216 Information Exposure Through Discrepancy vulnerability in multiple products
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue.
5.3
2023-09-20 CVE-2023-31014 Exposure of Resource to Wrong Sphere vulnerability in Nvidia Geforce NOW 6.00.32705137/6.04.33108832
NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer component.
local
low complexity
nvidia CWE-668
4.8
2023-09-20 CVE-2023-25526 Unspecified vulnerability in Nvidia Cumulus Linux
NVIDIA Cumulus Linux contains a vulnerability in neighmgrd and nlmanager where an attacker on an adjacent network may cause an uncaught exception by injecting a crafted packet.
low complexity
nvidia
6.5
2023-08-03 CVE-2023-25524 Unspecified vulnerability in Nvidia Omniverse Launcher
NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar.
network
low complexity
nvidia
5.3
2023-06-23 CVE-2023-25518 Unspecified vulnerability in Nvidia Jetson Linux
NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arbitrary memory.
low complexity
nvidia
6.8
2023-06-23 CVE-2023-25520 Improper Input Validation vulnerability in Nvidia Jetson Linux
NVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged local attacker can configure invalid settings, resulting in denial of service.
local
low complexity
nvidia CWE-20
5.5
2023-04-22 CVE-2023-0190 NULL Pointer Dereference vulnerability in Nvidia GPU Display Driver
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a NULL pointer dereference may lead to denial of service.
local
low complexity
nvidia CWE-476
5.5
2023-04-22 CVE-2023-0199 Out-of-bounds Write vulnerability in Nvidia GPU Display Driver
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds write can lead to denial of service and data tampering.
local
low complexity
nvidia CWE-787
6.1