Nvidia Tesla vulnerabilities

CVE-2025-23332 [MEDIUM] CWE-476 CVE-2025-23332: NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker might NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker might be able to trigger a null pointer deference. A successful exploit of this vulnerability might lead to denial of service.

CVE-2026-48596 [LOW] CWE-113 Tesla has CRLF injection in request `Content-Type` header via `add_content_type_param` Tesla has CRLF injection in request `Content-Type` header via `add_content_type_param` ### Summary `Tesla.Multipart.add_content_type_param/2` appends caller-supplied strings to the multipart `Content-Type` header with no validation. A param value containing `\r\n` splits the header line, allowing an attacker who controls any content-type parameter (charset, boundary parameter, et

CVE-2026-24199 [MEDIUM] CWE-362 CVE-2026-24199: NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could caus NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service.

CVE-2025-23345 [MEDIUM] CWE-125 CVE-2025-23345: NVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an at NVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an attacker might cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure or denial of service.

CVE-2026-48598 [LOW] CWE-116 Tesla vulnerable to multipart part smuggling via unescaped `content-disposition` values Tesla vulnerable to multipart part smuggling via unescaped `content-disposition` values ### Summary `Tesla.Multipart.part_headers_for_disposition/1` interpolates `Content-Disposition` parameter values (field name, filename, and other opts) verbatim into the part header line without encoding or escaping any special characters. An attacker who controls a filename, field name, or o

CVE-2026-47526 [MEDIUM] CWE-476 CVE-2026-47526: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an at NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.

CVE-2026-47531 [MEDIUM] CWE-476 CVE-2026-47531: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer wh NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.