Skip to content
OpenAdvisories
High · 7.8 CVE-2026-47573 EUVD-2026-90122GHSA-2vvg-34x7-hxc4

NVIDIA NVAPI for Windows contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulner…

Published Sep 30, 2026 · Updated Oct 2, 2026 · Assigned by nvidia

Vendor: NVIDIA Product: GeForce Product: Guest driver Product: RTX, Quadro, NVS Product: Tesla Package: nvidia-graphics-drivers-304 Package: nvidia-graphics-drivers-340 Package: nvidia-graphics-drivers-390 Package: nvidia-graphics-drivers-418-server Package: nvidia-graphics-drivers-430 Package: nvidia-graphics-drivers-435 Package: nvidia-graphics-drivers-440 Package: nvidia-graphics-drivers-440-server Package: nvidia-graphics-drivers-450 Package: nvidia-graphics-drivers-450-server Package: nvidia-graphics-drivers-455 Package: nvidia-graphics-drivers-460 Package: nvidia-graphics-drivers-460-server Package: nvidia-graphics-drivers-470 Package: nvidia-graphics-drivers-470-server Package: nvidia-graphics-drivers-510 Package: nvidia-graphics-drivers-515 Package: nvidia-graphics-drivers-515-server Package: nvidia-graphics-drivers-520 Package: nvidia-graphics-drivers-530 Package: nvidia-graphics-drivers-535 Package: nvidia-graphics-drivers-535-server Package: nvidia-graphics-drivers-545 Package: nvidia-graphics-drivers-550 Package: nvidia-graphics-drivers-550-server Package: nvidia-graphics-drivers-560 Package: nvidia-graphics-drivers-565-server Package: nvidia-graphics-drivers-570 Package: nvidia-graphics-drivers-570-server Package: nvidia-graphics-drivers-575 Package: nvidia-graphics-drivers-575-server Package: nvidia-graphics-drivers-580 Package: nvidia-graphics-drivers-580-server Package: nvidia-graphics-drivers-590 Package: nvidia-graphics-drivers-590-server Package: nvidia-graphics-drivers-595 Package: nvidia-graphics-drivers-595-server Ecosystem: Ubuntu

Description

NVIDIA NVAPI for Windows contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Affected products

VendorProductAffectedFixed
NVIDIA GeForce All driver versions prior to 610.60, All driver versions prior to 616.56, All driver versions prior to 582.78 Only GPUs based on the NVIDIA Maxwell, Volta, and Pascal GPU architectures are affected. —
NVIDIA RTX, Quadro, NVS All driver versions prior to 610.88, All driver versions prior to 616.92, All driver versions prior to 582.78, All driver versions prior to 596.86 —
NVIDIA Tesla All driver versions prior to 596.86, All driver versions prior to 616.92, All driver versions prior to 610.88 —
NVIDIA Guest driver 596.36(All versions prior to and including vGPU 20.1), 582.53(All versions prior to and including vGPU 19.5) —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 nvidia-graphics-drivers-570 +3 No fix yet —
Ubuntu 26.04 LTS nvidia-graphics-drivers-550 +10 No fix yet —
Ubuntu 24.04 LTS nvidia-graphics-drivers-470 +16 No fix yet —
Ubuntu 22.04 LTS nvidia-graphics-drivers-390 +30 No fix yet —
Ubuntu 20.04 LTS nvidia-graphics-drivers-340 +17 No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS nvidia-graphics-drivers-340 +15 No fix yet —
Ubuntu 16.04 LTS nvidia-graphics-drivers-304 +1 No fix yet —
Ubuntu Pro 20.04 LTS nvidia-graphics-drivers-535 +6 No fix yet —
Ubuntu Pro 18.04 LTS nvidia-graphics-drivers-470 +2 No fix yet —

Advisories 1

References