CYBER CODE RED

Get real-time updates on Telegram

P5

CVE-2025-23345: GeForce All driver versions prior to 581.42, All driver versions prior to 580.95.05, All driver versions prior to…

CVE-2025-23345. CVSS 3.1 base score 4.4 (MEDIUM, Vendor/CNA). EPSS 0.0016 (percentile 0.04777), scored 17-Oct-2026.

Affected technology

GeForce · All driver versions prior to 581.42
NVIDIA

NVIDIA RTX, Quadro, NVS · All driver versions prior to 581.42
NVIDIA

NVIDIA RTX, Quadro, NVS · All driver versions prior to 573.76
NVIDIA

NVIDIA RTX, Quadro, NVS · All driver versions prior to 539.56
NVIDIA

Tesla · All driver versions prior to 581.42
NVIDIA

Tesla · All driver versions prior to 573.76
NVIDIA

Tesla · All driver versions prior to 539.56
NVIDIA

GeForce · All driver versions prior to 580.95.05
NVIDIA

GeForce · All driver versions prior to 570.195.03
NVIDIA

GeForce · All driver versions prior to 535.274.02
NVIDIA

NVIDIA RTX, Quadro, NVS · All driver versions prior to 580.95.05
NVIDIA

NVIDIA RTX, Quadro, NVS · All driver versions prior to 570.195.03
NVIDIA

NVIDIA RTX, Quadro, NVS · All driver versions prior to 535.274.02
NVIDIA

Tesla · All driver versions prior to 580.95.05
NVIDIA

Tesla · All driver versions prior to 570.195.03
NVIDIA

Tesla · All driver versions prior to 535.274.02
NVIDIA

Guest driver · 580.82.07(All versions up to and including the August 2025 release)
NVIDIA

Guest driver · 570.172.08(All versions prior to and including vGPU 18.4)
NVIDIA

Guest driver · 535.261.03(All versions prior to and including vGPU 16.11)
NVIDIA

Guest driver · 581.15(All versions prior to and including vGPU19.1)
NVIDIA

Guest driver · 573.48(All versions prior to and including vGPU 18.4)
NVIDIA

Guest driver · 539.41(All versions prior to and including vGPU 16.11)
NVIDIA

Guest driver · 580.82.07(All versions prior to and including vGPU 19.1)
NVIDIA

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Where an attacker might cause an out-of-bounds read. Vendor/CNA’s CVSS 3.1 assessment (base score 4.4/10) rates confidentiality impact as none; integrity and availability impact as low.

Published

CWE
CWE-125
CCR priority
17.6 /100 (P5)
CVSS 3.1
4.4 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L · Vendor/CNA
EPSS
0.0016 · percentile 0.04777 · 2026-10-17
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-23345.html