CVE-2026-24193

Analyzed Analyzed - Analysis Complete

Out-of-Bounds Write in NVIDIA Display Driver

Publication date: 2026-05-26

Last updated on: 2026-06-11

Assigner: NVIDIA Corporation

Description

NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-26

Last Modified

2026-06-11

Generated

2026-07-06

AI Q&A

2026-05-26

EPSS Evaluated

2026-07-04

NVD

CVE-2026-24193

EUVD

EUVD-2026-31929

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	gpu_display_driver	From 595 (inc) to 595.71.05 (exc)
nvidia	gpu_display_driver	From 535 (inc) to 535.309.01 (exc)
nvidia	gpu_display_driver	From 580 (inc) to 580.159.03 (exc)
nvidia	gpu_display_driver	From 535 (inc) to 539.72 (exc)
nvidia	gpu_display_driver	From 580 (inc) to 582.53 (exc)
nvidia	gpu_display_driver	From 595 (inc) to 595.36 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Compliance Impact

The vulnerability in the NVIDIA Display Driver could lead to information disclosure and data tampering, which may impact compliance with data protection regulations such as GDPR and HIPAA. Unauthorized access or alteration of sensitive data due to this flaw could result in violations of these standards' requirements for data confidentiality and integrity.

Additionally, the potential for privilege escalation and code execution increases the risk of unauthorized system control, further complicating compliance efforts related to system security and auditability.

Executive Summary

CVE-2026-24193 is a vulnerability in the NVIDIA Display Driver for Windows and Linux that allows an attacker to cause an out-of-bounds write.

An out-of-bounds write occurs when a program writes data outside the boundaries of allocated memory, which can corrupt data, crash the system, or allow further malicious actions.

Impact Analysis

Exploiting this vulnerability could lead to several serious impacts including denial of service, escalation of privileges, information disclosure, data tampering, and arbitrary code execution.

Denial of service: The system or driver could crash or become unresponsive.
Escalation of privileges: An attacker could gain higher-level access than intended.
Information disclosure: Sensitive information could be exposed.
Data tampering: Data integrity could be compromised.
Code execution: An attacker could execute arbitrary code on the affected system.

Hi! I’m here to help you understand CVE-2026-24193. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70