NVIDIA vulnerabilities

CVE-2025-23345 Medium · 4.4 CWE-125 Oct 23, 2025

Out-of-bounds Read in NVIDIA GeForce

NVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an attacker might cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure or denial of service.

CVE-2025-23352 High · 7.8 CWE-824 Oct 23, 2025

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a…

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVE-2025-23332 Medium · 5.0 CWE-476 Oct 23, 2025

NULL Pointer Dereference in NVIDIA Virtual GPU Manager

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker might be able to trigger a null pointer deference. A successful exploit of this vulnerability might lead to denial of service.

CVE-2025-23330 Medium · 5.5 CWE-476 Oct 23, 2025

NULL Pointer Dereference in NVIDIA GeForce

NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.

CVE-2025-23300 Medium · 5.5 CWE-476 Oct 23, 2025

NULL Pointer Dereference in NVIDIA Virtual GPU Manager

NVIDIA Display Driver for Linux contains a vulnerability in the kernel driver, where a user could cause a null pointer dereference by allocating a specific memory resource. A successful exploit of this vulnerability might lead to denial of service.

CVE-2025-23299 Medium · 6.7 CWE-787 Oct 22, 2025

Out-of-bounds Write in NVIDIA BlueField GA

NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code.

CVE-2025-33177 Medium · 5.5 CWE-400 Oct 14, 2025

Uncontrolled Resource Consumption in NVIDIA Jetson Orin Series

NVIDIA Jetson Linux and IGX OS contain a vulnerability in NvMap, where improper tracking of memory allocations could allow a local attacker to cause memory overallocation. A successful exploitation of this vulnerability might lead to denial of service.

CVE-2025-33182 High · 7.6 CWE-862 Oct 14, 2025

Missing Authorization in NVIDIA Jetson Orin Series

NVIDIA Jetson Linux contains a vulnerability in UEFI, where improper authentication may allow a privileged user to cause corruption of the Linux Device Tree. A successful exploitation of this vulnerability might lead to data tampering, denial of service.

CVE-2025-23356 High · 8.4 CWE-306 Oct 14, 2025

Missing Authentication for Critical Function in NVIDIA Isaac Lab

NVIDIA Isaac Lab contains a vulnerability in SB3 configuration parsing. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

CVE-2025-23355 High · 7.8 CWE-427 Oct 1, 2025

Uncontrolled Search Path Element in NVIDIA Nsight Graphics

NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and denial of service.

CVE-2025-23297 High · 7.8 CWE-276 Oct 1, 2025

Incorrect Default Permissions in NVIDIA NVIDIA App

NVIDIA Installer for NvAPP for Windows contains a vulnerability in the FrameviewSDK installation process, where an attacker with local unprivileged access could modify files in the Frameview SDK directory. A successful exploit of this vulnerability might lead to escalation of privileges.