CVE-2025-23300: Virtual GPU Manager 580.82.02(All versions up to and including the August 2025 release), 580.82.02(All versions prior…

Affected technology

Virtual GPU Manager · 580.82.02(All versions up to and including the August 2025 release)
NVIDIA

Virtual GPU Manager · 580.82.02(All versions prior to and including vGPU 19.1)
NVIDIA

Virtual GPU Manager · 570.172.07(All versions prior to and including vGPU 18.4)
NVIDIA

Virtual GPU Manager · 535.261.04(All versions prior to and including vGPU 16.11)
NVIDIA

GeForce · All driver versions prior to 580.95.05
NVIDIA

GeForce · All driver versions prior to 570.195.03
NVIDIA

GeForce · All driver versions prior to 535.274.02
NVIDIA

NVIDIA RTX, Quadro, NVS · All driver versions prior to 580.95.05
NVIDIA

NVIDIA RTX, Quadro, NVS · All driver versions prior to 570.195.03
NVIDIA

NVIDIA RTX, Quadro, NVS · All driver versions prior to 535.274.02
NVIDIA

Tesla · All driver versions prior to 580.95.05
NVIDIA

Tesla · All driver versions prior to 570.195.03
NVIDIA

Tesla · All driver versions prior to 535.274.02
NVIDIA

Guest driver · 580.82.07(All versions prior to and including vGPU 19.1)
NVIDIA

Guest driver · 580.82.07(All versions up to and including the August 2025 release)
NVIDIA

Guest driver · 570.172.08(All versions prior to and including vGPU 18.4)
NVIDIA

Guest driver · 535.261.03(All versions prior to and including vGPU 16.11)
NVIDIA

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Where a user could cause a null pointer dereference by allocating a specific memory resource. Vendor/CNA’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high.