CVE-2023-25515

Severity: high (CVSS 7.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-06-23 · updated 2026-06-17
Weakness: CWE-822

Description

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure.

Affected products

NVIDIA Cloud Gaming: before 531.79 — fixed in 531.79
NVIDIA Guest driver: from 470 before 474.44; from 530 before 536.23; from 530 before 536.40; from 525 before 529.11; from 530 before 536.25; from 450 before 454.23 — fixed in 450.248.02, 454.23, 470.199.02, 474.44, 525.125.06, 529.11
NVIDIA Virtual GPU Software: before 11.12; from 13.0 before 13.7; from 15.0 before 15.2 — fixed in 11.12, 13.7, 15.2

How to fix

Upgrade to a fixed version: NVIDIA Cloud Gaming 531.79; NVIDIA Guest driver 450.248.02, 454.23, 470.199.02, 474.44; NVIDIA Virtual GPU Software 11.12, 13.7, 15.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-25515 or the next vulnerability affects your stack