CVE-2026-47502

Summary

NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer, where a guest user could cause an integer overflow leading to memory corruption. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Affected Software

VendorProductVersion RangeStatus
NVIDIAGeForceAll driver versions prior to 610.60affected
NVIDIARTX, Quadro, NVSAll driver versions prior to 610.88affected
NVIDIAGeForceAll driver versions prior to 616.56affected
NVIDIARTX, Quadro, NVSAll driver versions prior to 616.92affected
NVIDIAGeForceAll driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.affected
NVIDIARTX, Quadro, NVSAll driver versions prior to 582.78affected
NVIDIARTX, Quadro, NVSAll driver versions prior to 596.86affected
NVIDIATeslaAll driver versions prior to 596.86affected
NVIDIATeslaAll driver versions prior to 596.86affected
NVIDIATeslaAll driver versions prior to 616.92affected
NVIDIATeslaAll driver versions prior to 610.88affected
NVIDIAGeForceAll driver versions prior to 615.71.09affected
NVIDIAGeForceAll driver versions prior to 610.57.04affected
NVIDIARTX, Quadro, NVSAll driver versions prior to 615.71.09affected
NVIDIARTX, Quadro, NVSAll driver versions prior to 610.57.04affected
NVIDIARTX, Quadro, NVSAll driver versions prior to 595.91.07affected
NVIDIARTX, Quadro, NVSAll driver versions prior to 580.178.04affected
NVIDIATeslaAll driver versions prior to 615.71.09affected
NVIDIATeslaAll driver versions prior to 610.57.04affected
NVIDIATeslaAll driver versions prior to 595.91.07affected
NVIDIATeslaAll driver versions prior to 580.178.04affected
NVIDIAGeForceAll driver versions prior to 595.91.07affected
NVIDIAGeForceAll driver versions prior to 580.178.04affected

Weaknesses

  • CWE-190: CWE-190 Integer Overflow or Wraparound

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References