NVIDIA just revealed more GPU driver security issues and so you should make sure you’re up to date.
For desktop PCs here’s the list of issues:
CVE ID | Description | Severity | Impacts |
---|---|---|---|
CVE-2025-23309 | NVIDIA Display Driver contains a vulnerability where an uncontrolled DLL loading path might lead to arbitrary denial of service, escalation of privileges, code execution, and data tampering. | High | Denial of service, escalation of privileges, data tampering |
CVE-2025-23347 | NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. | High | Code execution, escalation of privileges, data tampering, denial of service, information disclosure |
CVE-2025-23280 | NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. | High | Code execution, escalation of privileges, data tampering, denial of service, information disclosure |
CVE-2025-23282 | NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. | High | Code execution, escalation of privileges, data tampering, denial of service, information disclosure |
CVE-2025-23300 |
NVIDIA Display Driver for Linux contains a vulnerability in the kernel driver, where a user could cause a null pointer dereference by allocating a specific memory resource. A successful exploit of this vulnerability might lead to denial of service. | Medium | Denial of service |
CVE-2025-23330 | NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to cause a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service. | Medium | Denial of service |
CVE-2025-23332 | NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker might be able to cause a null pointer deference. A successful exploit of this vulnerability might lead to denial of service. | Medium | Denial of service |
CVE-2025-23345 | NVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an attacker might cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure or denial of service. | Medium | Information disclosure, denial of service |
To be sure you’re protected you should be on driver versions 580.95.05, 570.195.03 or 535.274.02 as they note all previous versions are vulnerable.
See the security bulletin for more info.
Some you may have missed, popular articles from the last month:
All posts need to follow our rules. Please hit the Report Flag icon on any post that breaks the rules or contains illegal / harmful content. Readers can also email us for any issues or concerns.
This was another case of light release notes hiding security patches? (There were still four non-security items though.)
https://www.nvidia.com/en-us/drivers/details/254665/ [External Link]
https://www.nvidia.com/en-us/drivers/details/254665/ [External Link]
0 Likes