by Kastro
Paper/Archive/CVE-2025-23344

CVE-2025-23344

NVIDIA NVDebug tool — The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to run code on the platform host as a non-privileged user.

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 40.3.403 × 208.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to run code on the platform host as a non-privileged user. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure and data tampering.

Affected

ProductAffectedFixed inSource
NVDebug toolAll versions prior to 1.7.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvidia (CNA)7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refnvd.nist.gov/vuln/detail/CVE-2025-23344refcve.org/CVERecord?id=CVE-2025-23344refnvidia.custhelp.com/app/answers/detail/a_id/5696