CVE-2025-23286 Details
Description
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an attacker could read invalid memory. A successful exploit of this vulnerability might lead to information disclosure.
A vulnerability exists in the NVIDIA GPU Display Driver for both Windows and Linux, where an attacker could read invalid memory. Exploitation of this vulnerability may lead to unauthorized information disclosure.
Users can download and install the latest NVIDIA GPU Display Driver versions from the NVIDIA Driver Downloads page. For vGPU software updates, visit the NVIDIA Licensing Portal.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Aug 2, 2025CISA-ADP
Assessed Aug 4, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://nvidia.custhelp.com/app/answers/detail/a_id/5670 | [email protected] | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| NVIDIA GPU Display Driver | < 577.00 < 575.64.05 (semver) < 570.172.08 (semver) < 573.48 < 539.41 < 535.261.03 (semver) |
CPE
Remediation
| |
| NVIDIA vGPU software | All versions |
CPE
Remediation
| |
| NVIDIA Virtual GPU Manager | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Aug 2, 2025 | New CVE Received | [email protected] |