Severity
7.6HIGH
EPSS
0.1%
top 82.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 23
Description
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages10 packages
▶CVEListV5nvidia/gpu_display_driver_for_windows_and_linuxAll versions prior to and including 15.2, 13.7, and 11.12, and all versions prior to and including the May 2023 release
🔴Vulnerability Details
3CVEList▶
CVE-2023-25515: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution,↗2023-06-23
OSV▶
CVE-2023-25515: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution,↗2023-06-23
GHSA▶
GHSA-wh8r-hxhg-w5g2: NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical acc↗2023-06-23
📋Vendor Advisories
1Debian▶
CVE-2023-25515: nvidia-graphics-drivers - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where u...↗2023