Vulnerability · Published Jun 23, 2023 · Assigned by nvidia
CVE-2023-25515
High 7.8
In plain English
A high-severity security flaw in GPU Display Driver for Windows and Linux from NVIDIA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 86.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | nvidia-graphics-drivers | 525.125.06-1~deb12u1 | DEBIAN-CVE-2023-25515 |
| Debian:13 | nvidia-graphics-drivers | 525.125.06-1 | DEBIAN-CVE-2023-25515 |
| Debian:14 | nvidia-graphics-drivers | 525.125.06-1 | DEBIAN-CVE-2023-25515 |
| Debian:12 | nvidia-graphics-drivers-tesla | 525.125.06-1~deb12u1 | DEBIAN-CVE-2023-25515 |
| Debian:12 | nvidia-graphics-drivers-tesla-470 | 470.199.02-1~deb12u1 | DEBIAN-CVE-2023-25515 |
| Debian:12 | nvidia-open-gpu-kernel-modules | 525.125.06-1~deb12u1 | DEBIAN-CVE-2023-25515 |
| Debian:13 | nvidia-open-gpu-kernel-modules | 525.125.06-1 | DEBIAN-CVE-2023-25515 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| NVIDIA | GPU Display Driver for Windows and Linux | All versions prior to and including 15.2, 13.7, and 11.12, and all versions prior to and including the May 2023 release |
Weakness: CWE-822 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H