NVIDIA vGPU Software Uninitialized Pointer Vulnerability in Virtual GPU Manager Allowing Code Execution and Privilege Escalation

A vulnerability exists in NVIDIA vGPU software's Virtual GPU Manager, where a malicious guest could exploit uninitialized pointer access. This vulnerability affects several components and versions of the vGPU software, potentially leading to unauthorized code execution, privilege escalation, information disclosure, data tampering, and denial of service.

Impact

Exploitation of this vulnerability could result in uninitialized pointer access, allowing for arbitrary code execution, privilege escalation, and causing a denial of service. Additionally, it could lead to unauthorized information disclosure and data tampering.

Remediation

Users can update to vGPU version 19.2 for Windows or 580.95.05 for Linux. For NVIDIA Cloud Gaming, the September 2025 release includes the necessary updates. Instructions for downloading these updates are available through the NVIDIA Licensing Portal.