Description
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Published: 2026-09-30
Score: 6.7 Medium
EPSS: n/a
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 01 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
Title nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via firmware out-of-bounds read
Metrics threat_severity

None

threat_severity

Moderate


Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Weaknesses CWE-125
References
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-09-30T17:59:47.247Z

Reserved: 2026-05-19T19:55:42.912Z

Link: CVE-2026-47527

cve-icon Vulnrichment

Updated: 2026-09-30T17:55:49.026Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:19.160

Modified: 2026-09-30T18:18:24.210

Link: CVE-2026-47527

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-09-30T15:52:42Z

Links: CVE-2026-47527 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-09-30T19:30:18Z

Weaknesses