Description
NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, information disclosure.
Published: 2026-10-27
Score: 7.8 High
EPSS: n/a
KEV: No
Impact: Out-of-bounds write leading to potential code execution, data tampering, denial of service, and information disclosure
Action: Apply patch
AI Analysis

Impact

The vulnerability is an out‑of‑bounds write in NVIDIA PhysX that could allow an attacker to corrupt memory. A successful exploit might enable arbitrary code execution, modify sensitive data, crash the application or system, or exfiltrate confidential information.

Affected Systems

All platforms running NVIDIA PhysX are potentially affected. No specific version range is listed, so any deployment of PhysX may be vulnerable until a patch is applied.

Risk and Exploitability

The CVSS score of 7.8 indicates a serious potential impact. EPSS data is not available, suggesting no publicly confirmed exploit cases yet. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector would involve interaction with an application that utilizes PhysX on the host, possibly requiring the attacker to supply malicious input to that application or to leverage a vulnerability in a dependent component.

Generated by OpenCVE AI on October 27, 2026 at 14:05 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update NVIDIA PhysX to the latest patched version
  • If an immediate update cannot be applied, disable or shut down PhysX-enabled features in applications until a patch is available
  • Restrict privileged access and network reachability to systems that run PhysX, and monitor logs for suspicious activity

Generated by OpenCVE AI on October 27, 2026 at 14:05 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 27 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Write in NVIDIA PhysX Leading to Potential Code Execution

Tue, 27 Oct 2026 12:45:00 +0000

Type Values Removed Values Added
Description NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, information disclosure.
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-10-27T12:17:18.717Z

Reserved: 2026-05-19T19:55:39.687Z

Link: CVE-2026-47486

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-27T13:16:57.380

Modified: 2026-10-27T15:03:41.023

Link: CVE-2026-47486

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-27T14:15:03Z

Weaknesses