CVE-2025-23347

HighCVSS 7.8/10Last modified Oct 18, 2026

Description

NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-276

Affected software

VendorProductVersions
NVIDIAGeForceAll driver versions prior to 581.42
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 581.42
NVIDIANVIDIA RTX, Quadro, NVSAll driver versions prior to 573.76
NVIDIATeslaAll driver versions prior to 581.42
NVIDIATeslaAll driver versions prior to 573.76

References

Timeline

Published
Oct 23, 2025
Last modified
Oct 18, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-233487.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may caCVE-2025-233497.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq.py component, where an attacker may cause a CVE-2025-23353.5A vulnerability classified as problematic was found in Drivin Soluções up to 20250226. This vulnerability affects unknown code of the file /CVE-2025-233509.0NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may causCVE-2025-233519.0NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function (VF) access may causCVE-2025-233527.8NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. CVE-2025-233537.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker mCVE-2025-233547.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensemble_classifer script where malicious data created by an attacker mCVE-2025-233557.8NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. A CVE-2025-233568.4NVIDIA Isaac Lab contains a vulnerability in SB3 configuration parsing. A successful exploit of this vulnerability might lead to code executCVE-2025-233577.8NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injeCVE-2025-233588.2NVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path element issue. A successf
CVE-2025-23347: High severity, CVSS 7.8 | Vulnix