CVE-2025-23345
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-23

Last updated on: 2025-10-27

Assigner: NVIDIA Corporation

Description
NVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an attacker might cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure or denial of service.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-23
Last Modified
2025-10-27
Generated
2026-06-16
AI Q&A
2025-10-23
EPSS Evaluated
2026-06-15
NVD
CVE-2025-23345
EUVD
EUVD-2025-35724
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
nvidia vgpu *
nvidia cloud_gaming *
nvidia display_driver *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the NVIDIA Display Driver for Windows and Linux, specifically in a video decoder component. It is an out-of-bounds read flaw, which means that an attacker could exploit it to read memory outside the intended boundaries. This can potentially lead to information disclosure or cause a denial of service. [2]

Impact Analysis

If exploited, this vulnerability could allow an attacker with local access and low privileges to cause information disclosure or denial of service on the affected system. The impact includes low integrity and availability impacts but no confidentiality loss according to the CVSS assessment. [2]

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-23345. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart