CVE-2026-24189

NVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could cause an out-of-bounds read by sending a maliciously crafted request. A successful exploit of this vulnerability might lead to denial of service and information disclosure...

CVE-2026-24189

NVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could cause an out-of-bounds read by sending a maliciously crafted request. A successful exploit of this vulnerability might lead to denial of service and information disclosure...

CVE-2026-24189

NVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could cause an out-of-bounds read by sending a maliciously crafted request. A successful exploit of this vulnerability might lead to denial of service and information disclosure...

NVIDIA CUDA-Q 缓冲区错误漏洞

NVIDIA CUDA-Q is a hybrid quantum-classical computing development platform provided by NVIDIA Corporation. NVIDIA CUDA-Q has a buffer error vulnerability, which stems from out-of-bounds read operations at the endpoint. This vulnerability could allow unauthorized attackers to cause denial of servi...

Security Bulletin: NVIDIA CUDA-Q - April 2026

NVIDIA has released a software update for NVIDIA® CUDA-Q. To protect your system, clone or update this software to CUDA-Q v0.14.0 or later from CUDA-Q on GitHub. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security update addresses...

CVE-2026-1839 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, tritonserver-backend-vllm-cuda-12.9, lmcache-cuda-12.8, py3-transformers, tritonserver-backend-vllm-cuda-13.0, nemo, text-generation-inference...

GHSA-69W3-R845-3855 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, tritonserver-backend-vllm-cuda-12.9, lmcache-cuda-12.8, py3-transformers, tritonserver-backend-vllm-cuda-13.0, nemo, text-generation-inference...

Important: Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.3.1 (CUDA)

Red Hat AI Inference Server Model Optimization Tools 3.3.1 CUDA is now available. Red Hat® AI Inference Server Model Optimization Tools...

GHSA-WHJ4-6X5X-4V2J vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, open-webui, litellm, py3-vllm-cuda-12.4, text-generation-inference, kubeflow-pipelines-visualization-server, superset...

CVE-2026-40192 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, open-webui, litellm, py3-vllm-cuda-12.4, text-generation-inference, kubeflow-pipelines-visualization-server, superset...

CVE-2026-34753 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, py3-vllm-cuda-12.4...

GHSA-3MWP-WVH9-7528 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, tritonserver-backend-vllm-cuda-13.0, py3-vllm-cuda-12.4...

GHSA-PQ5C-RJHQ-QP7P vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, tritonserver-backend-vllm-cuda-13.0, py3-vllm-cuda-12.4...

GHSA-PF3H-QJGV-VCPR vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, py3-vllm-cuda-12.4...

CVE-2026-34756 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, tritonserver-backend-vllm-cuda-13.0, py3-vllm-cuda-12.4...

CVE-2026-34755 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, tritonserver-backend-vllm-cuda-13.0, py3-vllm-cuda-12.4...

GHSA-P423-J2CM-9VMQ vulnerabilities

Vulnerabilities for packages: prefect, label-studio, apache-beam-python-3.12-sdk, barman, kubeflow-jupyter-web-app, py3-cassandra-medusa, openstack-kolla-toolbox-2025.2, kubeflow-volumes-web-app, tritonserver-backend-vllm-cuda-13.0, pgadmin4-fips, metaflow-service, airflow,...

CVE-2026-39892 vulnerabilities

Vulnerabilities for packages: prefect, label-studio, apache-beam-python-3.12-sdk, barman, kubeflow-jupyter-web-app, py3-cassandra-medusa, openstack-kolla-toolbox-2025.2, kubeflow-volumes-web-app, tritonserver-backend-vllm-cuda-13.0, pgadmin4-fips, metaflow-service, airflow,...

Important: Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (CUDA)

Red Hat AI Inference Server 3.2.2 CUDA is now available. Red Hat® AI Inference Server...

Deserialization of Untrusted Data

Overview nvidia-dali-cuda120 is a NVIDIA DALI for CUDA 12.0. Git SHA: a807a5a11d234580f6857bc4b3206ab8d7080f27 Affected versions of this package are vulnerable to Deserialization of Untrusted Data. An attacker can execute arbitrary code by providing specially crafted data to be deserialized...