11340 matches found
NVIDIA nvJPEG2000 安全漏洞
NVIDIA nvJPEG2000 is a library from NVIDIA, Inc. for decoding and encoding JPEG2000 images on NVIDIA GPUs. A security vulnerability exists in NVIDIA nvJPEG2000 version 0.8.0, which stems from a buffer overflow issue that can be caused by an attacker with a specially crafted JPEG2000 file, and...
NVIDIA Container Toolkit 安全漏洞
NVIDIA Container Toolkit is a container toolkit from NVIDIA, Inc. Allows users to build and run GPU-accelerated containers. A security vulnerability exists in NVIDIA Container Toolkit versions prior to 24.9.2, which stems from the inclusion of a time-of-check time-of-use TOCTOU vulnerability when...
The vulnerability of the NVIDIA Virtual GPU Manager driver, which allows a hacker to execute arbitrary code, trigger service failures, or disclose sensitive information.
The vulnerability of the NVIDIA Virtual GPU Manager driver relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code, cause service failures, or disclose sensitive information...
NVIDIA nvJPEG2000 安全漏洞
NVIDIA nvJPEG2000 is a library from NVIDIA, Inc. for decoding and encoding JPEG2000 images on NVIDIA GPUs. A security vulnerability exists in NVIDIA nvJPEG2000 version 0.8.0, which originates from a heap-based buffer overflow issue that can be caused by an attacker via a specially crafted JPEG200...
NVIDIA Triton Inference Server 输入验证错误漏洞
NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. NVIDIA Triton Inference Server has an input validation error vulnerability that can be exploited by attackers to cause a denial of service...
CVE-2024-0112
NVIDIA Jetson AGX Orin™ and NVIDIA IGX Orin software contain a vulnerability where an attacker can cause an improper input validation issue by escalating certain permissions to a limited degree. A successful exploit of this vulnerability might lead to code execution, denial of service, data...
CVE-2024-0112
NVIDIA Jetson AGX Orin™ and NVIDIA IGX Orin software contain a vulnerability where an attacker can cause an improper input validation issue by escalating certain permissions to a limited degree. A successful exploit of this vulnerability might lead to code execution, denial of service, data...
CVE-2024-0112
CVE-2024-0112 affects NVIDIA Jetson AGX Orin and NVIDIA IGX Orin; the issue is an input validation failure that can let an attacker escalate permissions and potentially cause code execution, denial of service, data corruption, information disclosure, or privilege escalation. NVIDIA’s security bul...
How Wiz found a Critical NVIDIA AI vulnerability: Deep Dive into a container escape (CVE-2024-0132)
Technical details on a critical severity vulnerability CVE-2024-0132 in NVIDIA Container Toolkit and GPU Operator, affecting cloud service providers...
Security Bulletin: NVIDIA Triton Inference Server - February 2025
NVIDIA has released a software update for NVIDIA® Triton Inference Server. To protect your system, download and install the latest release from the Triton Inference Server Releases page on GitHub and view the Secure Deployment Considerations Guide. Go to NVIDIA Product Security...
Security Bulletin: NVIDIA nvJPEG2000 - February 2025
NVIDIA has released a software update for NVIDIA® nvJPEG2000 to address the issues listed below. To protect your system, download and install this software update from nvJPEG2000 Downloads page. Go to NVIDIA Product Security. Details This section provides a summary of potential vulnerabilities th...
NVIDIA nvJPEG2000 缓冲区错误漏洞
NVIDIA nvJPEG2000 is a library from NVIDIA, Inc. for decoding and encoding JPEG2000 images on NVIDIA GPUs. NVIDIA nvJPEG2000 suffers from a buffer error vulnerability that originates from allowing out-of-bounds writes to memory. An attacker exploiting this vulnerability could execute code and...
NVIDIA nvJPEG2000 Coding Style Component index out-of-bounds write vulnerability
Talos Vulnerability Report TALOS-2024-2095 NVIDIA nvJPEG2000 Coding Style Component index out-of-bounds write vulnerability February 11, 2025 CVE Number CVE-2024-0143 SUMMARY A memory corruption vulnerability exists in the Coding Style Component handling of the NVIDIA nvJPEG2000 library version...
NVIDIA nvJPEG2000 Default Coding Styles Ndecomp buffer overflow vulnerability
Talos Vulnerability Report TALOS-2024-2113 NVIDIA nvJPEG2000 Default Coding Styles Ndecomp buffer overflow vulnerability February 11, 2025 CVE Number CVE-2024-0145 SUMMARY A heap based buffer overflow vulnerability exists in the way Ndecomp parameter is used when parsing JPEG2000 files in NVIDIA...
NVIDIA nvJPEG2000 Ndecomp heap-based buffer overflow vulnerability
Talos Vulnerability Report TALOS-2024-2108 NVIDIA nvJPEG2000 Ndecomp heap-based buffer overflow vulnerability February 11, 2025 CVE Number CVE-2024-0144 SUMMARY A heap-based buffer overflow vulnerability exists in the Ndecomp field handling of NVIDIA nvJPEG2000 0.8.0. A specially crafted JPEG2000...
Security Bulletin: NVIDIA Container Toolkit - 11 February 2025
NVIDIA has released a software update for NVIDIA® Container Toolkit and NVIDIA GPU Operator. To protect your system, install the software update as described in the installation section of the NVIDIA Container Toolkit documentation and the NVIDIA GPU Operator documentation. Go to NVIDIA Product...
Security Bulletin: NVIDIA Jetson AGX Orin Series and NVIDIA IGX Orin - February 2025
NVIDIA has released software updates for NVIDIA® Jetson AGX Orin™ series and NVIDIA IGX Orin. To protect your system, download and install the latest release for Jetson AGX Orin series as part of the NVIDIA JetPack™ software development kit SDK from NVIDIA DevZone and the latest release for IGX...
PT-2025-6424
Name of the Vulnerable Software and Affected Versions NVIDIA Container Toolkit versions up to and including 1.17.3 NVIDIA GPU Operator versions up to and including 24.9.1 Description NVIDIA Container Toolkit and NVIDIA GPU Operator are affected by a Time-of-Check Time-of-Use TOCTOU vulnerability...
NVIDIA nvJPEG2000 cSIZ out-of-bounds write vulnerability
Talos Vulnerability Report TALOS-2024-2080 NVIDIA nvJPEG2000 cSIZ out-of-bounds write vulnerability February 11, 2025 CVE Number CVE-2024-0142 SUMMARY A memory corruption vulnerability exists in the Image Decoding functionality of NVIDIA nvJPEG2000 0.8.0. A specially crafted .jp2 file can lead to...
