PublicCVE
Log inSign up

CVE-2025-23352

HIGH7.8JSON exportCreate alert

Description

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

CVSS breakdown

CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected products

  • NVIDIA / Virtual GPU Manager580.82.02(All versions up to and including the August 2025 release) – 580.82.02(All versions up to and including the August 2025 release)
  • NVIDIA / Virtual GPU Manager580.82.02(All versions prior to and including vGPU 19.1) – 580.82.02(All versions prior to and including vGPU 19.1)
  • NVIDIA / Virtual GPU Manager570.172.07(All versions prior to and including vGPU 18.4) – 570.172.07(All versions prior to and including vGPU 18.4)
  • NVIDIA / Virtual GPU Manager535.261.04(All versions prior to and including vGPU 16.11) – 535.261.04(All versions prior to and including vGPU 16.11)

References