CVE-2025-23242

CVE-2025-23242 – NVIDIA Riva is affected by an improper access control vulnerability in NVIDIA Riva. The issue could allow privilege escalation, data tampering, denial of service, or information disclosure. Affected versions: all up to 2.18.0; remediation: upgrade to 2.19.0 (per NVIDIA security b...

CVE-2025-23242

NVIDIA Riva contains a vulnerability where a user could cause an improper access control issue. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, denial of service, or information disclosure...

NVIDIA Nemo Framework 安全漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A security vulnerability exists in NVIDIA Nemo Framework that originates from relative path traversal and could lead to code execution and data tampering...

Security Bulletin: NVIDIA Riva - March 2025

NVIDIA has released a software update for NVIDIA Riva. To protect your system, download and install this software update from NVIDIA Riva for Developers. Go to NVIDIA Product Security. Details This section provides a summary of potential vulnerabilities that this security update addresses and the...

PT-2025-10898 · Nvidia · Nvidia Riva

Name of the Vulnerable Software and Affected Versions: NVIDIA Riva affected versions not specified Description: The issue is related to improper access control, which could be exploited to cause data tampering or denial of service. Recommendations: At the moment, there is no information about a...

PT-2025-10897 · Nvidia · Nvidia Riva

Name of the Vulnerable Software and Affected Versions: NVIDIA Riva versions up to and including 2.18.0 Description: The issue is related to improper access control, which could lead to escalation of privileges, data tampering, denial of service, or information disclosure. A successful exploit of...

NVIDIA Riva 访问控制错误漏洞

NVIDIA Riva is a fully accelerated conversational AI application framework released by NVIDIA for building multimodal conversational AI services using end-to-end. An access control error vulnerability exists in NVIDIA Riva rivaquickstart, which can be exploited by an attacker to submit a special...

CVE-2024-0114

NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the HGX Management Controller HMC that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful exploit of this vulnerability may lead to code execution, denial of service,...

Important: libnvidia-container

Issue Overview: NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges,...

CVE-2024-0114

NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the HGX Management Controller HMC that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful exploit of this vulnerability may lead to code execution, denial of service,...

CVE-2024-0114

NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the HGX Management Controller HMC that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful exploit of this vulnerability may lead to code execution, denial of service,...

CVE-2024-0114

The CVE-2024-0114 entry affects NVIDIA Hopper HGX for 8-GPU, specifically the HGX Management Controller (HMC). The vulnerability allows a malicious actor with administrative access on the BMC to access the HMC as an administrator, enabling potential code execution, denial of service, privilege es...

CVE-2024-0114

NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the HGX Management Controller HMC that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful exploit of this vulnerability may lead to code execution, denial of service,...

Linux Distros Unpatched Vulnerability : CVE-2024-0147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU display driver for Windows and Linux contains a vulnerability where referencing memory after it has been freed can lead to denial of service or data...

Linux Distros Unpatched Vulnerability : CVE-2024-0150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU display driver for Windows and Linux contains a vulnerability where data is written past the end or before the beginning of a buffer. A successful...

NVIDIA Hopper HGX 8-GPU 安全漏洞

The NVIDIA Hopper HGX 8-GPU is a high-performance computing HGX architecture GPU module from NVIDIA, Inc. It is used for computing tasks such as deep learning and large-scale data processing. A security vulnerability exists in the NVIDIA Hopper HGX 8-GPU, which stems from a vulnerability in the H...

Linux Distros Unpatched Vulnerability : CVE-2022-34684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer nvidia.ko, where an off-by-one error may lead to data tampering or...

PT-2025-9730 · Nvidia · Nvidia Hopper Hgx

Name of the Vulnerable Software and Affected Versions: NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the HGX Management Controller HMC Description: The issue is related to a vulnerability in the HGX Management Controller HMC of the NVIDIA Hopper HGX for 8-GPU, which may allow a maliciou...

CVE-2024-0148

NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrusted code. A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of...

CVE-2024-0148

NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrusted code. A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of...