NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an access of an uninitialized pointer. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
History

Thu, 01 Oct 2026 03:30:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia geforce
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla
Nvidia virtual Gpu Manager
Vendors & Products Nvidia
Nvidia geforce
Nvidia nvs
Nvidia quadro
Nvidia rtx
Nvidia tesla
Nvidia virtual Gpu Manager

Thu, 01 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
Title Firmware Vulnerability in NVIDIA GPU Drivers Allows Uninitialized Pointer Access nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: arbitrary code execution via uninitialized pointer access
Metrics threat_severity

None

threat_severity

Important


Wed, 30 Sep 2026 19:30:00 +0000

Type Values Removed Values Added
Title Firmware Vulnerability in NVIDIA GPU Drivers Allows Uninitialized Pointer Access

Wed, 30 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 30 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Description NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an access of an uninitialized pointer. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Weaknesses CWE-824
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published: 2026-09-30T15:50:03.318Z

Updated: 2026-10-01T03:56:31.536Z

Reserved: 2026-05-19T19:55:42.912Z

Link: CVE-2026-47528

cve-icon Vulnrichment

Updated: 2026-09-30T17:57:33.456Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-30T16:17:19.327

Modified: 2026-10-01T04:18:12.090

Link: CVE-2026-47528

cve-icon Redhat

Severity : Important

Publid Date: 2026-09-30T15:50:03Z

Links: CVE-2026-47528 - Bugzilla