BaseFortify

Publication date: 2025-10-23

Last updated on: 2025-10-27

Assigner: NVIDIA Corporation

Description

NVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an attacker might cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure or denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-23

Last Modified

2025-10-27

Generated

2026-07-06

AI Q&A

2025-10-23

EPSS Evaluated

2026-07-05

NVD

CVE-2025-23345

EUVD

EUVD-2025-35724

Affected Vendors & Products

Vendor	Product	Version / Range
nvidia	vgpu	*
nvidia	cloud_gaming	*
nvidia	display_driver	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the NVIDIA Display Driver for Windows and Linux, specifically in a video decoder component. It is an out-of-bounds read flaw, which means that an attacker could exploit it to read memory outside the intended boundaries. This can potentially lead to information disclosure or cause a denial of service. [2]

Impact Analysis

If exploited, this vulnerability could allow an attacker with local access and low privileges to cause information disclosure or denial of service on the affected system. The impact includes low integrity and availability impacts but no confidentiality loss according to the CVSS assessment. [2]

Hi! I’m here to help you understand CVE-2025-23345. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70