CVE-2025-23252
BaseFortify
Publication date: 2025-06-18
Last updated on: 2025-09-18
Assigner: NVIDIA Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| nvidia | nvdebug | 1.6.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-1244 | The product uses physical debug or test interfaces with support for multiple access levels, but it assigns the wrong debug access level to an internal asset, providing unintended access to the asset from untrusted debug agents. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-23252 is a medium severity vulnerability in the NVIDIA NVDebug tool that allows an attacker with high privileges and requiring user interaction to gain access to restricted components. This can potentially lead to the disclosure of sensitive information. The vulnerability affects versions prior to 1.6.1 on x86_64 and arm64-SBSA architecture systems. [1]
How can this vulnerability impact me? :
If exploited, this vulnerability may allow an attacker to access restricted components and disclose sensitive information. This could compromise confidentiality but does not affect integrity or availability. The impact depends on the specific system configuration and the sensitivity of the information accessible through the NVDebug tool. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability affects NVIDIA NVDebug tool versions prior to 1.6.1 on x86_64 and arm64-SBSA systems. To detect if your system is vulnerable, check the installed version of the NVDebug tool. For example, you can run the command 'nvdebug --version' or check the package version via your system's package manager. If the version is earlier than 1.6.1, your system is vulnerable. [1]
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, immediately update the NVIDIA NVDebug tool to version 1.6.1 or later. Download and install the latest version from the NVIDIA Developer Tools page. Additionally, evaluate your system's risk based on your specific configuration and ensure that only trusted users with high privileges have access to the tool, as exploitation requires high privileges and user interaction. [1]