Nvidia Tesla vulnerabilities

CVE-2026-47550 [HIGH] CWE-119 CVE-2026-47550: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unp NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unprivileged local user can supply an untrusted pointer that the driver dereferences without validation. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data

CVE-2026-47600 [HIGH] CWE-908 CVE-2026-47600: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly initialized resource. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

CVE-2026-47601 [HIGH] CWE-787 CVE-2026-47601: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel m NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module DMA-BUF import path where an unprivileged local user could cause improper preservation of memory access permissions when importing a read-only buffer from another device's DMA-BUF exporter. A successful exploit of this vulnerability might lead to

CVE-2026-47597 [HIGH] CWE-416 CVE-2026-47597: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel m NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module Resource Server where an unprivileged local user could cause a use-after-free through a missing self-reference guard in the map cleanup path. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial

CVE-2026-48594 [HIGH] CWE-409 Tesla has decompression bomb on response body Tesla has decompression bomb on response body ### Summary Any Tesla client pipeline that includes `Tesla.Middleware.DecompressResponse` or `Tesla.Middleware.Compression` eagerly decompresses HTTP response bodies with no size limit. A server under attacker control (or reached via a redirect) can return a tiny gzip-encoded payload that expands into gigabytes of BEAM heap, crashing or freezing the calling process. Stackin

CVE-2026-47580 [HIGH] CWE-862 CVE-2026-47580: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacke NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause a missing authorization issue. A successful exploit of this vulnerability might lead to information disclosure and data tampering.

CVE-2025-23347 [HIGH] CWE-276 CVE-2025-23347: NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permiss NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

CVE-2026-24191 [HIGH] CWE-367 CVE-2026-24191: NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-c NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

CVE-2026-47570 [HIGH] CWE-427 CVE-2026-47570: NVIDIA GPU Display Driver for Windows contains a vulnerability in the CUDA driver where an attacker NVIDIA GPU Display Driver for Windows contains a vulnerability in the CUDA driver where an attacker could cause a library to be loaded from an uncontrolled search path. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.

CVE-2026-47576 [HIGH] CWE-125 CVE-2026-47576: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module through which an NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module through which an attacker might initiate an out-of-bounds read. Successful exploitation of this issue could lead to denial of service and information disclosure.

CVE-2025-23309 [HIGH] CWE-427 CVE-2025-23309: NVIDIA Display Driver contains a vulnerability where an uncontrolled DLL loading path might lead to NVIDIA Display Driver contains a vulnerability where an uncontrolled DLL loading path might lead to arbitrary denial of service, escalation of privileges, code execution, and data tampering.

CVE-2026-47582 [HIGH] CWE-787 CVE-2026-47582: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacke NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVE-2026-48595 [HIGH] CWE-178 Tesla: Authorization header leaks on cross-origin redirect via case-sensitive filtering Tesla: Authorization header leaks on cross-origin redirect via case-sensitive filtering ### Summary `Tesla.Middleware.FollowRedirects` is meant to strip the `Authorization` header when following a cross-origin redirect, but performs the check with a case-sensitive comparison against the lowercase string `"authorization"`. Because Tesla preserves header keys exactly as supplied

CVE-2025-23282 [HIGH] CWE-415 CVE-2025-23282: NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a ra NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

CVE-2026-47598 [HIGH] CWE-416 CVE-2026-47598: NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between asynchronous event delivery and file close. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of se

CVE-2025-23280 [HIGH] CWE-416 CVE-2025-23280: NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-f NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

CVE-2026-47596 [HIGH] CWE-281 CVE-2026-47596: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unpri NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memory's permissions are not preserved. A successful exploit of this vulnerability might lead to code execution and escalation of privileges.

CVE-2026-47538 [MEDIUM] CWE-787 CVE-2026-47538: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an at NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVE-2026-47537 [MEDIUM] CWE-787 CVE-2026-47537: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an attac NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVE-2026-47532 [MEDIUM] CWE-787 CVE-2026-47532: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.