7.8

CVE-2023-25515: nvidia cloud_gaming Untrusted Pointer Dereference

CVSS: 7.8v3.1HighModified
AliasesDEBIAN-CVE-2023-25515
Published 23-06-2023Last modified 29-11-2024
Open JSON

Vulnerability summary

CVE-2023-25515 is a high (CVSS 7.8) Untrusted Pointer Dereference vulnerability in nvidia cloud_gaming. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 12.4% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.22%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 23-06-2023
    PublishedVulnerability first disclosed.
  2. 29-11-2024
    Last modifiedVulnerability information updated.

Description

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.22%

Chance of exploitation in the next 30 days

Percentile

12%

Versus all other CVEs

30-day change

0.00 pp

From 0.22% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Debian4 products
  • nvidia-graphics-drivers< 525.125.06-1~deb12u1 | < 525.125.06-1
  • nvidia-graphics-drivers-tesla< 525.125.06-1~deb12u1
  • nvidia-graphics-drivers-tesla-470< 470.199.02-1~deb12u1
  • nvidia-open-gpu-kernel-modules< 525.125.06-1~deb12u1 | < 525.125.06-1
Nvidia4 products
  • cloud_gaming< 531.79
  • gpu_display_driver≥ 470, < 474.44 | ≥ 530, < 536.23 | ≥ 530, < 536.40 | ≥ 525, < 529.11 | ≥ 530, < 536.25 | ≥ 450, < 454.23 | ≥ 470, < 470.199.02 | ≥ 525, < 525.125.06 | ≥ 530, < 535.54.03 | ≥ 450, < 450.248.02
  • gpu display driver for windows and linuxAll versions prior to and including 15.2, 13.7, and 11.12, and all versions prior to and including the May 2023 release
  • virtual_gpu< 11.12 | ≥ 13.0, < 13.7 | ≥ 15.0, < 15.2

2 vendors · 8 products

References

2 links