Paper/Archive/CVE-2025-23343

CVE-2025-23343

NVIDIA NVDebug tool — The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to write files to restricted components.

EPSS 0.8%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 55.9.559 × 2011.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to write files to restricted components. A successful exploit of this vulnerability may lead to information disclosure, denial of service, and data tampering.

Affected

ProductAffectedFixed inSource

NVDebug toolAll versions prior to 1.7.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvidia (CNA)7.6CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refnvd.nist.gov/vuln/detail/CVE-2025-23343 refcve.org/CVERecord?id=CVE-2025-23343 refnvidia.custhelp.com/app/answers/detail/a_id/5696