CVE-2025-23347 Details
Description
NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
A vulnerability in NVIDIA Project G-Assist could allow an attacker to escalate permissions. Exploiting this vulnerability might result in unauthorized code execution, elevated privileges, data manipulation, denial of service, and unintended information disclosure.
Users can update to the latest version of the NVIDIA GPU Display Driver or, for vGPU software and Cloud Gaming updates, through the NVIDIA Licensing Portal. Specific updated driver versions can be found in the NVIDIA Security Bulletin: October 2025.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 23, 2025CISA-ADP
Assessed Oct 23, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://nvd.nist.gov/vuln/detail/CVE-2025-23347 | [email protected] | Advisory |
| https://nvidia.custhelp.com/app/answers/detail/a_id/5703 | [email protected] | AdvisoryBundleRemedyVendor |
| https://www.cve.org/CVERecord?id=CVE-2025-23347 | [email protected] | Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-276 | Incorrect Default Permissions | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| NVIDIA Project G-Assist | All versions |
CPE
Remediation
| |
| NVIDIA GeForce | All versions |
CPE
Remediation
| |
| NVIDIA RTX | All versions |
CPE
Remediation
| |
| NVIDIA Quadro | All versions |
CPE
Remediation
| |
| NVIDIA NVS | All versions |
CPE
Remediation
| |
| NVIDIA Tesla | All versions |
CPE
Remediation
| |
| NVIDIA vGPU Software | All versions |
CPE
Remediation
| |
| NVIDIA Virtual GPU Manager | <= 19.1 <= 18.4 <= 16.11 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Oct 23, 2025 | New CVE Received | [email protected] |