CVE-2025-23245

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to access global resources. A successful exploit of this vulnerability might lead to denial of service.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-732

Affected software

VendorProductVersions
NVIDIAvGPU Software, Cloud GamingR535, R550, R570, R575

References

Timeline

Published
May 1, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-232465.5NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to conCVE-2025-232477.8NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer coulCVE-2025-232483.3NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passinCVE-2025-232499.8NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A succCVE-2025-23256.1The WP Test Email plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Email Logs in all versions up to, and including, 1.1CVE-2025-232509.8NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory CVE-2025-232519.8NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution. CVE-2025-232527.5The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted components. A successful exploit of thCVE-2025-232532.5NVIDIA NvContainer service for Windows contains a vulnerability in its usage of OpenSSL, where an attacker could exploit a hard-coded constaCVE-2025-232548.8NVIDIA TensorRT-LLM for any platform contains a vulnerability in python executor where an attacker may cause a data validation issue by locaCVE-2025-232553.3NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary where a user may cause an out-of-bounds read by passiCVE-2025-232568.7NVIDIA BlueField contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorizati
CVE-2025-23245: Medium severity, CVSS 5.5 | Vulnix