Out-of-Bounds Read Vulnerability in NVIDIA GPU Display Driver for Windows and Linux
CVE-2026-47527

6.7MEDIUM

Key Information:

Vendor

Nvidia
Status
Geforce
Rtx, Quadro, Nvs
Tesla
Vendor
CVE Published:
30 September 2026

What is CVE-2026-47527?

The NVIDIA GPU Display Driver for Windows and Linux features a vulnerability in its firmware that allows attackers to execute an out-of-bounds read attack. By exploiting this flaw, malicious actors could potentially gain the ability to execute arbitrary code, lead to denial of service conditions, escalate privileges, disclose sensitive information, or tamper with data. It is crucial for users to apply the necessary updates and patches to mitigate exposure to this vulnerability.

Affected Version(s)

GeForce Linux(R580) All driver versions prior to 580.178.04

GeForce Linux(R595) All driver versions prior to 595.91.07

GeForce Linux(R610) All driver versions prior to 610.57.04

References

https://nvd.nist.gov/vuln/detail/CVE-2026-47527
https://www.cve.org/CVERecord?id=CVE-2026-47527
https://github.com/NVIDIA/product-security/tree/main/2026...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.