CVE-2026-24192: CWE-681 Incorrect Conversion between Numeric Types in NVIDIA GeForce
A vulnerability in the NVIDIA Display Driver for Linux allows an attacker to exploit an incorrect conversion between numeric types, resulting in a heap buffer overflow. This flaw affects all driver versions prior to 595.71.05. Successful exploitation could lead to denial of service, privilege escalation, information disclosure, data tampering, and remote code execution. The vulnerability has a high severity rating with a CVSS score of 7.8. No official patch or remediation level has been confirmed at this time. There are no known exploits in the wild currently.
AI Analysis
Technical Summary
CVE-2026-24192 is a high-severity vulnerability in NVIDIA GeForce Linux display drivers prior to version 595.71.05. It involves an incorrect conversion between numeric types that causes a heap buffer overflow. This memory corruption can be leveraged by an attacker with local privileges to cause denial of service, escalate privileges, disclose sensitive information, tamper with data, or execute arbitrary code. The vulnerability is documented under CWE-681. No vendor advisory or patch information is currently available, and no known exploits have been reported.
Potential Impact
The vulnerability can lead to multiple severe impacts including denial of service, privilege escalation, information disclosure, data tampering, and arbitrary code execution on affected systems running vulnerable NVIDIA GeForce Linux drivers. The CVSS 3.1 base score of 7.8 reflects the high impact on confidentiality, integrity, and availability. Exploitation requires local access with low privileges and no user interaction is needed.
Mitigation Recommendations
Patch status is not yet confirmed — check the NVIDIA vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for updates from NVIDIA. No official remediation or temporary fix is currently documented.
CVE-2026-24192: CWE-681 Incorrect Conversion between Numeric Types in NVIDIA GeForce
Description
A vulnerability in the NVIDIA Display Driver for Linux allows an attacker to exploit an incorrect conversion between numeric types, resulting in a heap buffer overflow. This flaw affects all driver versions prior to 595.71.05. Successful exploitation could lead to denial of service, privilege escalation, information disclosure, data tampering, and remote code execution. The vulnerability has a high severity rating with a CVSS score of 7.8. No official patch or remediation level has been confirmed at this time. There are no known exploits in the wild currently.
CVSS v3.1
Score 7.8high
Affected software
pkg:rpm/redhat/nvidia-geforceRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-24192 is a high-severity vulnerability in NVIDIA GeForce Linux display drivers prior to version 595.71.05. It involves an incorrect conversion between numeric types that causes a heap buffer overflow. This memory corruption can be leveraged by an attacker with local privileges to cause denial of service, escalate privileges, disclose sensitive information, tamper with data, or execute arbitrary code. The vulnerability is documented under CWE-681. No vendor advisory or patch information is currently available, and no known exploits have been reported.
Potential Impact
The vulnerability can lead to multiple severe impacts including denial of service, privilege escalation, information disclosure, data tampering, and arbitrary code execution on affected systems running vulnerable NVIDIA GeForce Linux drivers. The CVSS 3.1 base score of 7.8 reflects the high impact on confidentiality, integrity, and availability. Exploitation requires local access with low privileges and no user interaction is needed.
Mitigation Recommendations
Patch status is not yet confirmed — check the NVIDIA vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for updates from NVIDIA. No official remediation or temporary fix is currently documented.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- nvidia
- Date Reserved
- 2026-01-21T19:09:34.079Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a15e035891d628fdc67d381
Added to database: 05/26/2026, 18:02:29 UTC
Last enriched: 06/02/2026, 21:13:38 UTC
Last updated: 07/31/2026, 19:22:58 UTC
Views: 78
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.