VYPR
← All advisories
High severity7.1NVD Advisory· Published Oct 2, 2020· Updated Jun 17, 2026

CVE-2020-5988

CVE-2020-5988

Description

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which allocated memory can be freed twice, which may lead to information disclosure or denial of service. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.

Affected products

5
  • Nvidia/Virtual GPU Manager3 versions
    cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*range: >=8.0,<8.5
    • cpe:2.3:a:nvidia:virtual_gpu_manager:11.0:*:*:*:*:*:*:*
    • (no CPE)range: 8.x (prior to 8.5), 10.x (prior to 10.4), 11.0
  • Nvidia/vGPU pluginllm-fuzzy
    Range: 8.x (prior to 8.5), 10.x (prior to 10.4), 11.0
  • Nvidia/vGPU softwarecpe-rescue
    Range: vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.