CVE-2026-24196

Analyzed Analyzed - Analysis Complete

Out-of-Bounds Read in NVIDIA Linux Display Driver

Publication date: 2026-05-26

Last updated on: 2026-06-11

Assigner: NVIDIA Corporation

Description

NVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to denial of service and information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-26

Last Modified

2026-06-11

Generated

2026-07-06

AI Q&A

2026-05-26

EPSS Evaluated

2026-07-04

NVD

CVE-2026-24196

EUVD

EUVD-2026-31928

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	gpu_display_driver	From 595 (inc) to 595.71.05 (exc)
nvidia	gpu_display_driver	From 535 (inc) to 535.309.01 (exc)
nvidia	gpu_display_driver	From 580 (inc) to 580.159.03 (exc)
nvidia	gpu_display_driver	From 535 (inc) to 539.72 (exc)
nvidia	gpu_display_driver	From 580 (inc) to 582.53 (exc)
nvidia	gpu_display_driver	From 595 (inc) to 595.36 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

CVE-2026-24196 is a vulnerability in the NVIDIA Display Driver for Linux that allows a user to trigger an out-of-bounds read.

This means that an attacker with local access and low privileges can cause the driver to read memory outside of its intended boundaries.

Exploiting this flaw could lead to denial of service and unauthorized disclosure of information.

Compliance Impact

The provided information does not specify how this vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.

Impact Analysis

A successful exploit of this vulnerability might lead to denial of service, causing the affected system or service to become unavailable.

Additionally, it could result in information disclosure, meaning sensitive data could be exposed to unauthorized users.

Detection Guidance

There is no specific information provided about detection methods or commands to identify this vulnerability on your network or system.

Mitigation Strategies

The provided information does not include explicit mitigation steps or recommendations to address this vulnerability.

Hi! I’m here to help you understand CVE-2026-24196. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70