Out-of-Bounds Write in NVIDIA Display Driver for Windows and Linux
CVE-2026-24193

7.8HIGH

Key Information:

Vendor

Nvidia
Status
Geforce
Rtx, Quadro, Nvs
Tesla
Vendor
CVE Published:
26 May 2026

What is CVE-2026-24193?

The NVIDIA Display Driver for both Windows and Linux has a critical security vulnerability that allows attackers to perform an out-of-bounds write. This flaw could potentially be exploited to cause denial of service, escalate user privileges, disclose sensitive information, tamper with data, or even execute arbitrary code. Users of the affected drivers must take immediate action to secure their systems against potential exploits.

Affected Version(s)

GeForce Linux(R535) All driver versions prior to 535.309.01

GeForce Linux(R580) All driver versions prior to 580.159.03

GeForce Windows(R580) All driver versions prior to 582.53 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24193
https://www.cve.org/CVERecord?id=CVE-2026-24193
https://nvidia.custhelp.com/app/answers/detail/a_id/5821

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.