NVIDIA PhysX: Out-of-bounds write
Summary
NVIDIA PhysX contains an out-of-bounds write vulnerability (CWE-787). According to the CNA record, a successful exploit may lead to code execution, data tampering, denial of service or information disclosure. Exploitation requires local access and user interaction, such as opening a malicious file.
Affected
- NVIDIA PhysX 0.0 through 0.4.1.2 (according to the CNA record; verify against the NVIDIA bulletin)
Fixed in
Unknown.
Workaround
Unknown.
Exploitation
- No public exploit or proof of concept known at the time of research.
- Not listed in CISA KEV.
- CISA SSVC: exploitation none, automatable no, technical impact total.
Our recommendation
- Inventory systems where PhysX runtimes are installed, especially shared gaming, CAD or simulation workstations.
- Ask vendors of PhysX-based applications for updates and check NVIDIA bulletin 5915 for a fixed version.
- Apply the fix as soon as NVIDIA publishes it and restrict local logons on affected machines.
- Monitor for updates to the NVD entry, as analysis is still pending.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- NVIDIA Security Bulletin 5915 github.com
- NVD: CVE-2026-47486 nvd.nist.gov
- CVE Record: CVE-2026-47486 www.cve.org
- VulDB: CVE-2026-47486 vuldb.com
- OffSeq Radar: CVE-2026-47486 radar.offseq.com
- Strix: CVE-2026-47486 www.strix.ai
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 22:13.
Original description (NVD)
NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, information disclosure.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.