{"id":"CVE-2026-47540","published":"2026-09-30T16:17:21.290","lastModified":"2026-10-01T04:18:13.583","description":"NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an integer underflow. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-191"],"vendors":[],"products":[],"references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5861","tags":[]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47540","tags":[]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47540","tags":[]}],"exploitRefs":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5861","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw is an integer underflow vulnerability in NVIDIA GPU drivers that could allow an attacker to execute arbitrary code, leading to potential code execution, denial of service, privilege escalation, and data manipulation. This vulnerability is significant because it can be exploited to gain unauthorized access and control over the system.","exploitability":"Exploitation is considered moderate to hard, requiring specific conditions such as the presence of the vulnerable driver version and potential kernel-level access. Precondition is the installation of the affected NVIDIA driver version.","blast_radius":"If exploited, the impact could be severe, leading to complete system compromise, data loss, and unauthorized access to sensitive information.","remediation":"Upgrade to the specific fixed version 531.43 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","privilege-escalation","data-tampering","code-execution","driver-vulnerability"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-08T08:42:27.667Z"}}