CVE-2025-23345

MediumCVSS 4.4/10Last modified Oct 18, 2026

Description

NVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an attacker might cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure or denial of service.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
NVIDIAGeForceAll driver versions prior to 581.42
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 581.42
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 573.76
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 539.56
NVIDIATeslaAll driver versions prior to 581.42
NVIDIATeslaAll driver versions prior to 573.76
NVIDIATeslaAll driver versions prior to 539.56
NVIDIAGeForceAll driver versions prior to 580.95.05
NVIDIAGeForceAll driver versions prior to 570.195.03
NVIDIAGeForceAll driver versions prior to 535.274.02
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 580.95.05
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 570.195.03
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 535.274.02
NVIDIATeslaAll driver versions prior to 580.95.05
NVIDIATeslaAll driver versions prior to 570.195.03
NVIDIATeslaAll driver versions prior to 535.274.02
NVIDIAGuest driver580.82.07(All versions up to and including the August 2025 release)
NVIDIAGuest driver570.172.08(All versions prior to and including vGPU 18.4)
NVIDIAGuest driver535.261.03(All versions prior to and including vGPU 16.11)
NVIDIAGuest driver581.15(All versions prior to and including vGPU19.1)
NVIDIAGuest driver573.48(All versions prior to and including vGPU 18.4)
NVIDIAGuest driver539.41(All versions prior to and including vGPU 16.11)
NVIDIAGuest driver580.82.07(All versions prior to and including vGPU 19.1)

References

Timeline

Published
Oct 23, 2025
Last modified
Oct 18, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-233463.3NVIDIA CUDA Toolkit contains a vulnerability in cuobjdump, where an unprivileged user can cause a NULL pointer dereference. A successful exCVE-2025-233477.8NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulneCVE-2025-233487.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may caCVE-2025-233497.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq.py component, where an attacker may cause a CVE-2025-23353.5A vulnerability classified as problematic was found in Drivin Soluções up to 20250226. This vulnerability affects unknown code of the file /CVE-2025-233509.0NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may causCVE-2025-233519.0NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may causCVE-2025-233527.8NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. CVE-2025-233537.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker mCVE-2025-233547.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensemble_classifer script where malicious data created by an attacker mCVE-2025-233557.8NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. A CVE-2025-233568.4NVIDIA Isaac Lab contains a vulnerability in SB3 configuration parsing. A successful exploit of this vulnerability might lead to code execut
CVE-2025-23345: Medium severity, CVSS 4.4 | Vulnix