CVE-2025-33221
BaseFortify
Publication date: 2026-05-26
Last updated on: 2026-05-26
Assigner: NVIDIA Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| nvidia | display_driver | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-20 | The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-33221 is a vulnerability in the NVIDIA Display Driver for Windows and Linux, specifically in the kernel driver component. The issue involves an incorrect permission assignment for a critical resource, which means that the system may grant inappropriate access rights to certain users.
This improper permission assignment could be exploited by a user to perform unauthorized actions such as data tampering or causing a denial of service.
How can this vulnerability impact me? :
If exploited, this vulnerability could allow an attacker with certain privileges to tamper with data or disrupt system availability by causing a denial of service.
The impact is primarily on system integrity and availability, as confidentiality is not affected according to the CVSS metrics.