Description
NVIDIA vGPU Manager contains a vulnerability in the GPU System Processor (GSP) plugin where a guest VM user may cause an out-of-bounds write by sending a specially crafted RPC message. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NVIDIA | Virtual GPU Manager | 595.71.03(All versions prior to and including vGPU 20.1), 580.159.01(All versions prior to and including vGPU 19.5), 596.38(All versions prior to and including vGPU 20.1), 582.51(All versions prior to and including vGPU 19.5) | — |
Advisories 1
- WID-SEC-2026-3680 Nvidia GPU Display Treiber: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026