PT-2026-5172

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is freed. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or...

NVIDIA HD Audio Driver code-related vulnerabilities

NVIDIA HD Audio Driver is a high-definition audio driver developed by NVIDIA Corporation. There are code vulnerabilities in the NVIDIA HD Audio Driver, specifically an issue with null pointer dereferencing, which may lead to denial-of-service attacks...

Command Injection

Overview runx is a runx - experiment manager for machine learning research Affected versions of this package are vulnerable to Command Injection in undisclosed functionality. According to the vendor, an attacker can execute arbitrary code, escalate privileges, cause denial of service, disclose...

CVE-2025-33234

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

CVE-2025-33234

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

CVE-2025-33234

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

CVE-2025-33234

The CVE-2025-33234 issue affects NVIDIA runx. A vulnerability in runx can enable code injection, with potential consequences including code execution, denial of service, privilege escalation, information disclosure, and data tampering. Root cause details indicate a local attack vector with low pr...

EUVD-2025-206385

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

CVE-2025-33234

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

Security Bulletin: NVIDIA runx - January 2026

A security issue was found in NVIDIA runx: https://github.com/NVIDIA/runx during End of Support, but prior to End of Life. As a result, NVIDIA has added an End of Life notice in the README. No patch will be released. Go to NVIDIA Product Security. Details The following table summarizes the...

PT-2026-4986

NVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

NVIDIA RunX security vulnerabilities

NVIDIA runx is a deep learning experiment management tool developed by NVIDIA Corporation. NVIDIA runx contains a security vulnerability, which stems from code injection. This vulnerability may lead to code execution, denial of service, privilege escalation, information leakage, and data corrupti...

NVIDIA Merlin Transformers4Rec Code Injection Vulnerability

NVIDIA Merlin Transformers4Rec is a software for building serialized and conversational recommender systems from NVIDIA. NVIDIA Merlin Transformers4Rec suffers from a code injection vulnerability that stems from incorrectly filtering input parameters, which can be exploited by a remote attacker t...

Nvidia Nsight Graphics < 2025.5 Command Injection

NVIDIA NSIGHT Graphics for Linux contains a vulnerability where an attacker could cause command injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and denial of service. Note that Nessus has not tested for this issue but h...

SUSE SLED15: libblkid-devel / libblkid-devel-static / libblkid1 / etc (SUSE-SU-2026:0230-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0230-1 advisory. - CVE-2025-14104: Fixed heap buffer overread in setpwnam when processing 256-byte usernames bsc1254666. - lscpu: Add...

NVIDIA NSIGHT Graphics Operating System Command Injection Vulnerability

NVIDIA NSIGHT Graphics is a GPU graphics debugging and performance analysis tool from NVIDIA. NVIDIA NSIGHT Graphics suffers from an operating system command injection vulnerability that stems from a lack of input validation, which can be exploited by attackers to cause code execution, elevation ...

SUSE-SU-2026:0230-1 Security update for util-linux

This update for util-linux fixes the following issues: - CVE-2025-14104: Fixed heap buffer overread in setpwnam when processing 256-byte usernames bsc1254666. - lscpu: Add support for NVIDIA Olympus arm64 core jscPED-13682...

Security update for util-linux

This update for util-linux fixes the following issues: CVE-2025-14104: Fixed heap buffer overread in setpwnam when processing 256-byte usernames bsc1254666. lscpu: Add support for NVIDIA Olympus arm64 core jscPED-13682. Patch Instructions: To install this SUSE update use the SUSE recommended...

NVIDIA CUDA Toolkit < 13.1 Multiple Vulnerabilities

The version of NVIDIA CUDA Toolkit installed on the remote host is prior to 13.1. It is, therefore, affected by multiple vulnerabilities, including the following: - NVIDIA Nsight Systems contains a vulnerability in the gfxhotspot recipe, where an attacker could cause an OS command injection by...

CVE-2025-33230

A flaw was found in the NVIDIA Nsight Systems for Linux installer. An attacker could exploit this vulnerability by providing a malicious string as the installation path, leading to an operating system OS command injection. A successful exploit could result in escalation of privileges, arbitrary...