CVE-2023-25515
NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized...
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure.
- Record
CVE-2023-25515- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-822
- Updated
- 2026-11-02
EUVDEUVD-2023-29467
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure.
- Record
EUVD-2023-29467- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wh8r-hxhg-w5g2
NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized...
NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arbitrary memory. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and loss of integrity.
- Record
GHSA-wh8r-hxhg-w5g2- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-822, CWE-923
- Updated
- 2026-11-02
NVD
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure.
- Record
CVE-2023-25515- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.6 High
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-822
- Updated
- 2026-11-02
OSV
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure.
- Record
CVE-2023-25515- CVSS 3.1
- 7.6 High
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-25515
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure.
- Record
DEBIAN-CVE-2023-25515- CVSS 3.1
- 7.6 High
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nvidia-graphics-driversDebian:12 |
before 525.125.06-1~deb12u1, plus listed versions 1.0.6629+1-21.0.7167-11.0.7174-11.0.7174-21.0.7174-3 Show 45 moreShow less1.0.7174-41.0.7664-11.0.7664-21.0.7667-11.0.7667-31.0.7676-11.0.7676-21.0.8174-11.0.8178-0bpo11.0.8178-11.0.8178-21.0.8178-31.0.8756-11.0.8756-21.0.8756-31.0.8756-41.0.8762-11.0.8762-21.0.8774-11.0.8774-21.0.8774-31.0.8774-41.0.8774-51.0.8774-61.0.8774-71.0.8776-11.0.8776-21.0.8776-31.0.8776-41.0.9625-11.0.9625-21.0.9631-11.0.9746-11.0.9746-21.0.9755-1100.14.06-1100.14.09-1100.14.11-1100.14.19-1169.07-1169.07-2169.09-1169.12-1169.12-2169.12-3 |
525.125.06-1~deb12u1 |
nvidia-graphics-driversDebian:13 |
before 525.125.06-1, plus listed versions 1.0.6629+1-21.0.7167-11.0.7174-11.0.7174-21.0.7174-3 Show 45 moreShow less1.0.7174-41.0.7664-11.0.7664-21.0.7667-11.0.7667-31.0.7676-11.0.7676-21.0.8174-11.0.8178-0bpo11.0.8178-11.0.8178-21.0.8178-31.0.8756-11.0.8756-21.0.8756-31.0.8756-41.0.8762-11.0.8762-21.0.8774-11.0.8774-21.0.8774-31.0.8774-41.0.8774-51.0.8774-61.0.8774-71.0.8776-11.0.8776-21.0.8776-31.0.8776-41.0.9625-11.0.9625-21.0.9631-11.0.9746-11.0.9746-21.0.9755-1100.14.06-1100.14.09-1100.14.11-1100.14.19-1169.07-1169.07-2169.09-1169.12-1169.12-2169.12-3 |
525.125.06-1 |
nvidia-graphics-driversDebian:14 |
before 525.125.06-1, plus listed versions 1.0.6629+1-21.0.7167-11.0.7174-11.0.7174-21.0.7174-3 Show 45 moreShow less1.0.7174-41.0.7664-11.0.7664-21.0.7667-11.0.7667-31.0.7676-11.0.7676-21.0.8174-11.0.8178-0bpo11.0.8178-11.0.8178-21.0.8178-31.0.8756-11.0.8756-21.0.8756-31.0.8756-41.0.8762-11.0.8762-21.0.8774-11.0.8774-21.0.8774-31.0.8774-41.0.8774-51.0.8774-61.0.8774-71.0.8776-11.0.8776-21.0.8776-31.0.8776-41.0.9625-11.0.9625-21.0.9631-11.0.9746-11.0.9746-21.0.9755-1100.14.06-1100.14.09-1100.14.11-1100.14.19-1169.07-1169.07-2169.09-1169.12-1169.12-2169.12-3 |
525.125.06-1 |
nvidia-graphics-drivers-teslaDebian:12 |
before 525.125.06-1~deb12u1, plus listed versions 418.116.00-1418.87.01-1418.87.01-2418.87.01-3510.108.03-1 Show 14 moreShow less510.108.03-2510.108.03-3510.85.02-1510.85.02-2510.85.02-3510.85.02-4515.48.07-1515.48.07-2515.65.01-1515.86.01-1525.105.17-1525.105.17-2525.60.13-1525.85.12-1 |
525.125.06-1~deb12u1 |
nvidia-graphics-drivers-tesla-470Debian:12 |
before 470.199.02-1~deb12u1, plus listed versions 470.103.01-1470.103.01-2470.103.01-2~deb11u1470.129.06-1470.129.06-2 Show 21 moreShow less470.129.06-3470.129.06-4470.129.06-5470.129.06-6470.129.06-6~deb11u1470.129.06-6~deb11u1~bpo10+1470.141.03-1470.141.03-1~deb11u1470.141.03-1~deb11u1~bpo10+1470.141.03-2470.141.03-3470.161.03-1470.161.03-1~deb11u1470.161.03-2470.182.03-1470.182.03-1~deb11u1470.182.03-2470.199.02-1~deb11u1470.57.02-1470.57.02-2470.82.01-1 |
470.199.02-1~deb12u1 |
nvidia-open-gpu-kernel-modulesDebian:12 |
before 525.125.06-1~deb12u1, plus listed versions 515.43.04-1515.43.04-2515.48.07-1515.65.01-1515.76-1 Show 7 moreShow less515.86.01-1520.56.06-1525.105.17-1525.105.17-2525.116.04-1525.85.12-1525.89.02-1 |
525.125.06-1~deb12u1 |
nvidia-open-gpu-kernel-modulesDebian:13 |
before 525.125.06-1, plus listed versions 515.43.04-1515.43.04-2515.48.07-1515.65.01-1515.76-1 Show 8 moreShow less515.86.01-1520.56.06-1525.105.17-1525.105.17-2525.116.04-1525.125.06-1~deb12u1525.85.12-1525.89.02-1 |
525.125.06-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-25515 is a high vulnerability (CVSS 7.8) in Nvidia Gpu Display Driver For Windows And Linux, published June 23, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 13th percentile. Fixed in nvidia-graphics-drivers 525.125.06-1~deb12u1.
References
Left out here: 1,538 versions. The JSON record has them.