{"id":"CVE-2026-47513","published":"2026-09-30T16:17:16.903","lastModified":"2026-10-01T04:18:10.307","description":"NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds read from kernel heap memory. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-125"],"vendors":[],"products":[],"references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5861","tags":[]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47513","tags":[]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47513","tags":[]}],"exploitRefs":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5861","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw is a kernel heap memory out-of-bounds read in NVIDIA GPU drivers, allowing code execution, data tampering, and privilege escalation. This vulnerability is significant because it can be exploited to gain unauthorized access and control over the system.","exploitability":"Exploitation requires local user privileges and access to the affected NVIDIA GPU driver. The vulnerability is relatively easy to exploit given the necessary conditions.","blast_radius":"If exploited, the vulnerability could lead to complete system compromise, including code execution, data loss, and unauthorized access to sensitive information.","remediation":"Upgrade to the latest NVIDIA driver version 535.105.01 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","privilege-escalation","memory-vulnerability"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-08T08:42:36.713Z"}}