CVE-2026-47504
Awaiting Analysis Awaiting Analysis - Queue

Outdated Cryptographic Library Type Confusion in NVIDIA Linux GPU Display Driver

Vulnerability report for CVE-2026-47504, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: NVIDIA Corporation

Description

NVIDIA Linux GPU Display Driver contains a vulnerability in the NGX updater where an outdated embedded cryptographic library is susceptible to type confusion. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, or data tampering.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
nvidia linux_gpu_display_driver *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-843 The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

NVIDIA Linux GPU Display Driver has a flaw in the NGX updater component due to an outdated cryptographic library. This flaw allows for a type confusion attack, which could be exploited to execute arbitrary code, cause denial of service, disclose sensitive information, or tamper with data.

Impact Analysis

If exploited, this vulnerability could allow attackers to run malicious code on your system, crash your device, steal confidential data, or alter stored information. It primarily affects systems using NVIDIA Linux GPU Display Driver with the vulnerable NGX updater.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations may face compliance penalties if systems are compromised due to this flaw.

Mitigation Strategies

Update the NVIDIA Linux GPU Display Driver to the latest version to address the outdated cryptographic library vulnerability in the NGX updater component.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47504. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart