What’s Vulnerable › Vulnerabilities

CVE-2025-23352

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-23 · updated 2026-10-08
• Weakness: CWE-824

Description

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Affected products

• NVIDIA Virtual GPU Manager: from 580.82.02(All versions up through and including the August 2025 release); from 580.82.02(All versions prior through and including vGPU 19.1); from 570.172.07(All versions prior through and including vGPU 18.4); from 535.261.04(All versions prior through and including vGPU 16.11)

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-23352
• https://nvidia.custhelp.com/app/answers/detail/a_id/5703
• https://www.cve.org/CVERecord?id=CVE-2025-23352

Get alerted when CVE-2025-23352 or the next vulnerability affects your stack