BaseFortify

Publication date: 2025-10-01

Last updated on: 2025-10-02

Assigner: NVIDIA Corporation

Description

NVIDIA Installer for NvAPP for Windows contains a vulnerability in the FrameviewSDK installation process, where an attacker with local unprivileged access could modify files in the Frameview SDK directory. A successful exploit of this vulnerability might lead to escalation of privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-01

Last Modified

2025-10-02

Generated

2026-07-06

AI Q&A

2025-10-02

EPSS Evaluated

2026-07-05

NVD

CVE-2025-23297

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	nvidia_installer	11.0.5.245

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-276	During installation, installed file permissions are set to allow anyone to modify those files.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the NVIDIA Installer for NvAPP on Windows, specifically in the FrameviewSDK installation process. An attacker with local unprivileged access could modify files in the Frameview SDK directory, which could lead to escalation of privileges.

Impact Analysis

If exploited, this vulnerability could allow an attacker with limited local access to escalate their privileges, potentially gaining higher-level access to the system and causing significant harm.

Hi! I’m here to help you understand CVE-2025-23297. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70