NVIDIA vulnerabilities
Every vulnerability this feed holds for NVIDIA, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
9 vulnerabilities tracked.
- 7.0 NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code.
- 6.3 NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary code execution.
- 6.3 NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to ex-filtrate…
- 6.3 NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd is running with root…
- 6.3 NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcast file transmission to write…
- 5.7 NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be chained…
- 5.5 NVIDIA nvJPEG contains a vulnerability where an attacker could cause a divide-by-zero.
- 5.3 NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary…
- 4.7 NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to remove files outside of…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that NVIDIA is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Microsoft Google Red Hat n/a Apache Software Foundation Linux MediaTek, Inc. Apple FreeRDP Eclipse Foundation Gitea Dell WAVLINK vim vercel jpadilla Huawei Unknown WSO2 AM System py-pdf zephyrproject nodejs PostgreSQL