Vulnerability index

Browse CVEs

725 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Triton Inference Server HIGH 7.5
CVE-2025-33211

NVIDIA Triton Server for Linux contains a vulnerability where an attacker may cause an improper validation of specified quantity in input. A successf…

Fix: 25.10+
Fix from $1,950 2025-12-03
Tao Toolkit HIGH 8.8
CVE-2025-33208

NVIDIA TAO contains a vulnerability where an attacker may cause a resource to be loaded via an uncontrolled search path. A successful exploit of this…

Patch available
Fix from $1,950 2025-12-03
Triton Inference Server HIGH 7.5
CVE-2025-33201

NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause an improper check for unusual or exceptional conditions issue by …

Fix: 25.10+
Fix from $1,950 2025-12-03
Nemo HIGH 7.8
CVE-2025-33204

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cau…

Fix: 2.5.1+
Fix from $1,950 2025-11-25
Nemo HIGH 7.3
CVE-2025-33205

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted c…

Fix: 2.5.1+
Fix from $1,950 2025-11-25
Dgx Os HIGH 7.8
CVE-2025-33195

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause unexpected memory buffer operations. A successful exp…

Mitigation only
Fix from $1,950 2025-11-25
Dgx Os HIGH 7.1
CVE-2025-33194

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper processing of input data. A successful explo…

Mitigation only
Fix from $1,950 2025-11-25
Dgx Os MEDIUM 5.5
CVE-2025-33196

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused. A successful exploit of this…

Mitigation only
Fix from $1,600 2025-11-25
Dgx Os MEDIUM 5.5
CVE-2025-33197

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a NULL pointer dereference. A successful exploit of t…

No fix yet
Fix from $1,600 2025-11-25
Dgx Os HIGH 7.8
CVE-2025-33188

NVIDIA DGX Spark GB10 contains a vulnerability in hardware resources where an attacker could tamper with hardware controls. A successful exploit of t…

Mitigation only
Fix from $1,950 2025-11-25
Dgx Os HIGH 7.8
CVE-2025-33189

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an out-of-bound write. A successful exploit of this v…

Mitigation only
Fix from $1,950 2025-11-25
Dgx Os HIGH 7.8
CVE-2025-33190

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware where an attacker could cause an out-of-bound write. A successful exploit of this vu…

Mitigation only
Fix from $1,950 2025-11-25
Dgx Os MEDIUM 5.5
CVE-2025-33191

NVIDIA DGX Spark GB10 contains a vulnerability in OSROOT firmware, where an attacker could cause an invalid memory read. A successful exploit of this…

Mitigation only
Fix from $1,600 2025-11-25
Dgx Os MEDIUM 5.5
CVE-2025-33192

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of thi…

Mitigation only
Fix from $1,600 2025-11-25
Dgx Os MEDIUM 5.5
CVE-2025-33193

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper validation of integrity. A successful exploi…

Mitigation only
Fix from $1,600 2025-11-25
Dgx Os HIGH 7.8
CVE-2025-33187

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas. A succe…

Mitigation only
Fix from $1,950 2025-11-25
Nemo HIGH 7.8
CVE-2025-33178

NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause…

Fix: 2.5.0+
Fix from $1,950 2025-11-11
Triton Inference Server MEDIUM 6.5
CVE-2025-33202

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extra-large p…

Fix: 25.09+
Fix from $1,600 2025-11-11
Nemo HIGH 7.8
CVE-2025-23361

NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control…

Fix: 2.5.0+
Fix from $1,950 2025-11-11
Nsight Graphics HIGH 7.8
CVE-2025-23355

NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. A successfu…

Fix: 2025.3+
Fix from $1,950 2025-10-01
Megatron Lm HIGH 7.8
CVE-2025-23353

NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker may cause …

Fix: 0.12.3+
Fix from $1,950 2025-09-24
Megatron Lm HIGH 7.8
CVE-2025-23354

NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensemble_classifer script where malicious data created by an attacker may cause …

Fix: 0.12.3+
Fix from $1,950 2025-09-24
Cuda Toolkit HIGH 7.8
CVE-2025-23339

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the …

Fix: 13.0.0+
Fix from $1,950 2025-09-24
Megatron Lm HIGH 7.8
CVE-2025-23348

NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may cause a cod…

Fix: 0.12.3+
Fix from $1,950 2025-09-24
Megatron Lm HIGH 7.8
CVE-2025-23349

NVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq.py component, where an attacker may cause a code inje…

Fix: 0.12.3+
Fix from $1,950 2025-09-24
Cuda Toolkit MEDIUM 5.5
CVE-2025-23338

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where a user may cause an out-of-bounds write by running nvdisasm on a mal…

Fix: 13.0.0+
Fix from $1,600 2025-09-24
Cuda Toolkit HIGH 7.8
CVE-2025-23308

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buffer overflow by getting the us…

Fix: 13.0.0+
Fix from $1,950 2025-09-24
Cuda Toolkit HIGH 7.1
CVE-2025-23275

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a GPU out-of-bounds write by prov…

Fix: 13.0.0+
Fix from $1,950 2025-09-24
Triton Inference Server CRITICAL 9.8
CVE-2025-23268

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker may cause an improper input validation issue. A success…

Fix: 25.07+
Fix from $2,300 2025-09-17
Triton Inference Server CRITICAL 9.8
CVE-2025-23316

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause a remote code exec…

Fix: 25.08+
Fix from $2,300 2025-09-17