CVE-2026-24201

MEDIUM

Nvidia Virtual Gpu Manager - Out-of-bounds Write

Title source: rule

Description

NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause an out-of-bound access. A successful exploit of this vulnerability might lead to data tampering, denial of service, or information disclosure.

References (3)

Core 3

Core References

https://nvd.nist.gov/vuln/detail/CVE-2026-24201

https://www.cve.org/CVERecord?id=CVE-2026-24201

https://nvidia.custhelp.com/app/answers/detail/a_id/5821

Scores

CVSS v3 5.8

EPSS 0.0014

EPSS Percentile 3.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-787

Status published

Products (6)

NVIDIA/Virtual GPU Manager 535.288.01(All versions prior to and including vGPU 16.13)

NVIDIA/Virtual GPU Manager 580.126.08(All versions prior to and including vGPU 19.4)

NVIDIA/Virtual GPU Manager 582.16(All versions prior to and including vGPU 19.4)

NVIDIA/Virtual GPU Manager 595.58.02(All versions prior to and including vGPU 20.0)

NVIDIA/Virtual GPU Manager 595.58.02(All versions up to and including the March 2026 release)

NVIDIA/Virtual GPU Manager 595.94(All versions prior to and including vGPU 20.0)

Published May 26, 2026

Tracked Since May 26, 2026