CVE-2025-33220 — Use After Free in Nvidia Geforce
Severity
7.8HIGHNVD
EPSS
0.0%
top 99.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 28
Description
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is freed. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages3 packages
▶CVEListV5nvidia/virtual_gpu_manager535.274.03(All versions prior to and including vGPU software 16.13), 570.195.02(All versions prior to and including vGPU software 18.5), 580.105.06(All versions prior to and including vGPU software 19.3)+2
🔴Vulnerability Details
3CVEList▶
CVE-2025-33220: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is f↗2026-01-28
OSV▶
CVE-2025-33220: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is f↗2026-01-28
GHSA▶
GHSA-xcvv-2phh-wm85: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is f↗2026-01-28