xref: /open-nvidia-gpu/SECURITY.md (revision 69791e9b)
1# Report a Security Vulnerability
2
3To report a potential security vulnerability in any NVIDIA product, please use either:
4* This web form: [Security Vulnerability Submission Form](https://www.nvidia.com/object/submit-security-vulnerability.html), or
5* Send email to: [NVIDIA PSIRT](mailto:psirt@nvidia.com)
6
7**OEM Partners should contact their NVIDIA Customer Program Manager**
8
9If reporting a potential vulnerability via email, please encrypt it using NVIDIA’s public PGP key ([see PGP Key page](https://www.nvidia.com/en-us/security/pgp-key/)) and include the following information:
10* Product/Driver name and version/branch that contains the vulnerability
11* Type of vulnerability (code execution, denial of service, buffer overflow, etc.)
12* Instructions to reproduce the vulnerability
13* Proof-of-concept or exploit code
14* Potential impact of the vulnerability, including how an attacker could exploit the vulnerability
15
16See https://www.nvidia.com/en-us/security/ for past NVIDIA Security Bulletins and Notices.
17