CVE-2025-23345
BaseFortify
Publication date: 2025-10-23
Last updated on: 2025-10-27
Assigner: NVIDIA Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| nvidia | vgpu | * |
| nvidia | cloud_gaming | * |
| nvidia | display_driver | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the NVIDIA Display Driver for Windows and Linux, specifically in a video decoder component. It is an out-of-bounds read flaw, which means that an attacker could exploit it to read memory outside the intended boundaries. This can potentially lead to information disclosure or cause a denial of service. [2]
How can this vulnerability impact me? :
If exploited, this vulnerability could allow an attacker with local access and low privileges to cause information disclosure or denial of service on the affected system. The impact includes low integrity and availability impacts but no confidentiality loss according to the CVSS assessment. [2]