Skip to content
OpenAdvisories
High · 7.8 CVE-2023-25515 EUVD-2023-29467GHSA-wh8r-hxhg-w5g2

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code …

Published Jun 23, 2023 · Updated Nov 29, 2024 · Assigned by nvidia

Description

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure.

Affected products

VendorProductAffectedFixed
NVIDIA GPU Display Driver for Windows and Linux All versions prior to and including 15.2, 13.7, and 11.12, and all versions prior to and including the May 2023 release —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 nvidia-graphics-drivers 525.125.06-1 —
Debian 13 nvidia-graphics-drivers +1 525.125.06-1 —
Debian 12 nvidia-graphics-drivers +2 525.125.06-1~deb12u1 —
Debian 12 nvidia-graphics-drivers-tesla-470 470.199.02-1~deb12u1 —

Advisories 1

References