NVIDIA is dedicated to the security and trust of our software products and services, including all source code repositories managed through our organization.

If you need to report a security issue, use the appropriate contact points outlined below. Do not report security vulnerabilities through GitHub. If a potential security issue is inadvertently reported through a public issue or pull request, NVIDIA maintainers may limit public discussion and redirect the reporter to the appropriate private disclosure channels.

To report a potential security vulnerability in any NVIDIA product:

• Web: Security Vulnerability Submission Form
• Email: psirt@nvidia.com
  • We encourage you to use the NVIDIA public PGP key for secure email communication.
  • Please include the following information:
    • Product or driver name and version or branch containing the vulnerability
    • Type of vulnerability, such as code execution, denial of service, or buffer overflow
    • Instructions to reproduce the vulnerability
    • Proof-of-concept or exploit code
    • Potential impact, including how an attacker could exploit the vulnerability

NVIDIA currently does not have a bug bounty program, but we do offer acknowledgement when an externally reported security issue is addressed under our coordinated vulnerability disclosure policy. Visit the PSIRT policies page for more information.

For all security-related concerns, visit NVIDIA's Product Security portal.