NVIDIA D3D10 Driver Shader Functionality undeclared dcl_output memory corruption vulnerability

Talos Vulnerability Report TALOS-2023-1719 NVIDIA D3D10 Driver Shader Functionality undeclared dcloutput memory corruption vulnerability August 10, 2023 CVE Number CVE-2022-34671 SUMMARY A memory corruption vulnerability exists in the Shader functionality of NVIDIA D3D10 Driver NVIDIA D3D10 Drive...

NVIDIA D3D10 Driver Shader Functionality dcl_resource_structured index memory corruption vulnerability

Talos Vulnerability Report TALOS-2023-1721 NVIDIA D3D10 Driver Shader Functionality dclresourcestructured index memory corruption vulnerability August 10, 2023 CVE Number CVE-2022-34671 SUMMARY A memory corruption vulnerability exists in the Shader Functionality of NVIDIA D3D10 Driver NVIDIA D3D1...

Adobe Dimension 资源管理错误漏洞

Adobe Dimension is a 3D design tool that is very easy for designers to use while providing high quality visuals. To create realistic objects, Adobe Dimension uses materials defined in the NVidia Material Design Language. Adobe Dimension has a post-release reuse vulnerability in version 3.4.9 and...

Out-of-Bounds Read

nvidia-cuda-toolkit is vulnerable to Out-of-Bounds Read. The vulnerability exists in cuobjdump which allows an attacker to cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file...

CVE-2023-25524

NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacker could use this token to impersonate the user to access launcher resources. A successful exploit ...

Design/Logic Flaw

NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacker could use this token to impersonate the user to access launcher resources. A successful exploit ...

CVE-2023-25524

NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacker could use this token to impersonate the user to access launcher resources. A successful exploit ...

CVE-2023-25524

CVE-2023-25524 affects NVIDIA Omniverse Workstation Launcher (Windows/Linux). The vulnerability is in the authentication flow where a user’s access token is displayed in the browser address bar, enabling an attacker to impersonate the user and access launcher resources, with information disclosur...

CVE-2023-25524

NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacker could use this token to impersonate the user to access launcher resources. A successful exploit ...

NVIDIA Omniverse Workstation Launcher Security Vulnerability

NVIDIA Omniverse Launcher is an easily extensible open platform from NVIDIA. Built for virtual collaboration and real-time physically accurate simulations. A security vulnerability exists in the NVIDIA Omniverse Workstation Launcher, which stems from a security issue in the authentication process...

Security Bulletin: NVIDIA Omniverse Launcher - August 2023

NVIDIA has released a software update for the Omniverse Workstation Launcher to address a security issue that may lead to information disclosure. To protect your system, download and apply the update for the Omniverse platform that you are using. If you are using the licensed NVIDIA Omniverse...

PT-2023-6515 · Nvidia · Nvidia Omniverse Workstation Launcher

Name of the Vulnerable Software and Affected Versions: NVIDIA Omniverse Workstation Launcher for Windows and Linux affected versions not specified Description: The issue is related to the authentication flow in the NVIDIA Omniverse Workstation Launcher, where a user's access token is visible in t...

Teenagers Face Trial for Hacking BT, Nvidia, Rockstar Games, Revolut, Uber

By Waqas Both teenagers, who are on trial in the United Kingdom, have been accused of being associated with the infamous Lapsus$ hacking group. This is a post from HackRead.com Read the original post: Teenagers Face Trial for Hacking BT, Nvidia, Rockstar Games, Revolut, Uber...

NVIDIA Display Driver Advisory - June 2023 - Lenovo Support US

No description provided...

NVIDIA DGX A100/A800 System BIOS < 1.21 Multiple Vulnerabilities

The system BIOS on the remote NVIDIA DGX A100 or A800 system is prior to 1.21. It is, therefore, affected by the following vulnerabilities: - Improper validation of an input parameter can lead to code execution, escalation of privileges, denial of service, information disclosure and data tamperin...

NVIDIA CUDA Toolkit < 12.2 DoS

The version of NVIDIA CUDA Toolkit installed on the remote host is prior to 12.2. It is, therefore affected by a denial of service vulnerability due to a NULL pointer deference in the nvdiasm binary file when parsing a malformed ELF file. Note that Nessus has not tested for this issue but has...

CVE-2023-25517

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where a guest OS may be able to control resources for which it is not authorized, which may lead to information disclosure and data tampering...

CVE-2023-25521

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution with unnecessary privileges by leveraging a weakness whereby proper input parameter validation is not performed. A successful exploit of this vulnerability may lead to denial of service, information...

CVE-2023-25517

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where a guest OS may be able to control resources for which it is not authorized, which may lead to information disclosure and data tampering...

CVE-2023-25521

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution with unnecessary privileges by leveraging a weakness whereby proper input parameter validation is not performed. A successful exploit of this vulnerability may lead to denial of service, information...