CVE-2025-33218

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

VendorProductVersions
NVIDIAGeForceAll driver versions prior to 591.59
NVIDIARTX PRO, RTX, QuadroAll driver versions prior to 591.59
NVIDIARTX PRO, RTX, QuadroAll driver versions prior to 582.16
NVIDIARTX PRO, RTX, QuadroAll driver versions prior to 573.96
NVIDIARTX PRO, RTX, QuadroAll driver versions prior to 539.64
NVIDIATeslaAll driver versions prior to 591.59
NVIDIATeslaAll driver versions prior to 582.16
NVIDIATeslaAll driver versions prior to 573.91
NVIDIATeslaAll driver versions prior to 539.64
NVIDIAGuest driver581.80(All versions prior to and including vGPU software 19.3)
NVIDIAGuest driver573.76(All versions prior to and including vGPU software 18.5)
NVIDIAGuest driver539.56(All versions prior to and including vGPU software 16.12)

References

Timeline

Published
Jan 28, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-332197.8NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an integer overflow or wrCVE-2025-332210.0An improper neutralization of inputs used in expression language allows remote code execution with the highest privileges on the server.CVE-2025-332207.8NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the mCVE-2025-332216.0NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission CVE-2025-332229.8NVIDIA Isaac Launchable contains a vulnerability where an attacker could exploit a hard-coded credential issue. A successful exploit of thisCVE-2025-332239.8NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges. A successful exploiCVE-2025-332249.8NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges. A successful exploiCVE-2025-332258.4NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names.CVE-2025-332267.8NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection. A sCVE-2025-332287.3NVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot recipe, where an attacker could cause an OS command injection by supplyingCVE-2025-332297.3NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the samCVE-2025-33238.8A vulnerability classified as critical was found in godcheese/code-projects Nimrod 0.8. Affected by this vulnerability is the function searc
CVE-2025-33218: High severity, CVSS 7.8 | Vulnix