Browse CVEs

HIGH 7.5 CVE-2025-33211 NVIDIA Triton Server for Linux contains a vulnerability where an attacker may cause an improper validation of specified quantity in input. A successf… Triton Inference Server 25.10+ Fix from $1,9502025-12-03 HIGH 8.8 CVE-2025-33208 NVIDIA TAO contains a vulnerability where an attacker may cause a resource to be loaded via an uncontrolled search path. A successful exploit of this… Tao Toolkit Patch available Fix from $1,9502025-12-03 HIGH 7.5 CVE-2025-33201 NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause an improper check for unusual or exceptional conditions issue by … Triton Inference Server 25.10+ Fix from $1,9502025-12-03 HIGH 7.8 CVE-2025-33204 NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cau… Nemo 2.5.1+ Fix from $1,9502025-11-25 HIGH 7.3 CVE-2025-33205 NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted c… Nemo 2.5.1+ Fix from $1,9502025-11-25 HIGH 7.8 CVE-2025-33195 NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause unexpected memory buffer operations. A successful exp… Dgx Os Mitigation only Fix from $1,9502025-11-25 HIGH 7.1 CVE-2025-33194 NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper processing of input data. A successful explo… Dgx Os Mitigation only Fix from $1,9502025-11-25 MEDIUM 5.5 CVE-2025-33196 NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused. A successful exploit of this… Dgx Os Mitigation only Fix from $1,6002025-11-25 MEDIUM 5.5 CVE-2025-33197 NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a NULL pointer dereference. A successful exploit of t… Dgx Os No fix yet Fix from $1,6002025-11-25 HIGH 7.8 CVE-2025-33188 NVIDIA DGX Spark GB10 contains a vulnerability in hardware resources where an attacker could tamper with hardware controls. A successful exploit of t… Dgx Os Mitigation only Fix from $1,9502025-11-25 HIGH 7.8 CVE-2025-33189 NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an out-of-bound write. A successful exploit of this v… Dgx Os Mitigation only Fix from $1,9502025-11-25 HIGH 7.8 CVE-2025-33190 NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware where an attacker could cause an out-of-bound write. A successful exploit of this vu… Dgx Os Mitigation only Fix from $1,9502025-11-25 MEDIUM 5.5 CVE-2025-33191 NVIDIA DGX Spark GB10 contains a vulnerability in OSROOT firmware, where an attacker could cause an invalid memory read. A successful exploit of this… Dgx Os Mitigation only Fix from $1,6002025-11-25 MEDIUM 5.5 CVE-2025-33192 NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of thi… Dgx Os Mitigation only Fix from $1,6002025-11-25 MEDIUM 5.5 CVE-2025-33193 NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper validation of integrity. A successful exploi… Dgx Os Mitigation only Fix from $1,6002025-11-25 HIGH 7.8 CVE-2025-33187 NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas. A succe… Dgx Os Mitigation only Fix from $1,9502025-11-25 HIGH 7.8 CVE-2025-33178 NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause… Nemo 2.5.0+ Fix from $1,9502025-11-11 MEDIUM 6.5 CVE-2025-33202 NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extra-large p… Triton Inference Server 25.09+ Fix from $1,6002025-11-11 HIGH 7.8 CVE-2025-23361 NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control… Nemo 2.5.0+ Fix from $1,9502025-11-11 HIGH 7.8 CVE-2025-23355 NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. A successfu… Nsight Graphics 2025.3+ Fix from $1,9502025-10-01 HIGH 7.8 CVE-2025-23353 NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker may cause … Megatron Lm 0.12.3+ Fix from $1,9502025-09-24 HIGH 7.8 CVE-2025-23354 NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensemble_classifer script where malicious data created by an attacker may cause … Megatron Lm 0.12.3+ Fix from $1,9502025-09-24 HIGH 7.8 CVE-2025-23339 NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the … Cuda Toolkit 13.0.0+ Fix from $1,9502025-09-24 HIGH 7.8 CVE-2025-23348 NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may cause a cod… Megatron Lm 0.12.3+ Fix from $1,9502025-09-24 HIGH 7.8 CVE-2025-23349 NVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq.py component, where an attacker may cause a code inje… Megatron Lm 0.12.3+ Fix from $1,9502025-09-24 MEDIUM 5.5 CVE-2025-23338 NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where a user may cause an out-of-bounds write by running nvdisasm on a mal… Cuda Toolkit 13.0.0+ Fix from $1,6002025-09-24 HIGH 7.8 CVE-2025-23308 NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buffer overflow by getting the us… Cuda Toolkit 13.0.0+ Fix from $1,9502025-09-24 HIGH 7.1 CVE-2025-23275 NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a GPU out-of-bounds write by prov… Cuda Toolkit 13.0.0+ Fix from $1,9502025-09-24 CRITICAL 9.8 CVE-2025-23268 NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker may cause an improper input validation issue. A success… Triton Inference Server 25.07+ Fix from $2,3002025-09-17 CRITICAL 9.8 CVE-2025-23316 NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause a remote code exec… Triton Inference Server 25.08+ Fix from $2,3002025-09-17