CVE-2024-0146 - NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause memory corruption · CoreCVE

Back Back to CVE browser

HIGH

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause memory corruption

Published Jan 28, 2025

7.8

HIGH

CVSS 3.1

EPSS 0.19%

Description

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause memory corruption. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, or data tampering.

Affected products

Vendor NVIDIA Product NVIDIA vGPU software Default
unaffected
- Version
  R530, R535
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

NVIDIA vGPU software

unaffected

Version	Status	Constraints
R530, R535	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-15945		Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5614

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner nvidia

Published Jan 28, 2025

Updated Jan 28, 2025

Reserved Dec 2, 2023

Link CVE-2024-0146

CISA Vulnrichment

Updated Jan 28, 2025

Status Deferred

Modified Jun 17, 2026

Link CVE-2024-0146

Severity n/a

Public date n/a

Links CVE-2024-0146

Assigner nvidia

Published Jan 28, 2025

Updated Jan 28, 2025

Exploited since n/a

Link EUVD-2024-15945

EUVD-2024-15945