PT-2026-3639 · Nvidia · Nvidia Nsight Systems

Publicado 2025-01-01 · Atualizado 2026-01-23 · CVE-2025-33231

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Nsight Systems for Windows (affected versions not specified)

Description The application has a flaw in how it loads DLLs, specifically related to insecure DLL search paths. This could allow an attacker to manipulate the search path, potentially leading to code execution, privilege escalation, data modification, denial of service, and information disclosure. The issue involves an uncontrolled search path element.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

DoS

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

BDU:2026-00698

CVE-2025-33231

Produtos afetados

Nvidia Nsight Systems

Referências · 11

• https://bdu.fstec.ru/vul/2026-00698 · Nota de Segurança
• https://twitter.com/CVEnew/status/2013683556522877405 · Publicação no Twitter
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-33231 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-33231 · Aviso do Fabricante
• https://nvidia.custhelp.com/app/answers/detail/a_id/5755 · Aviso do Fabricante
• https://twitter.com/OstorlabSec/status/2014745970047684881 · Publicação no Twitter
• https://security-tracker.debian.org/tracker/CVE-2025-33231 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-33231 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-33231 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-33231 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2025-33231 · Nota de Segurança