PT-2025-10897 · Nvidia · Nvidia Riva

Alfredo Oliveira

+1

·

Published

2025-03-11

·

Updated

2025-05-03

·

CVE-2025-23242

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions NVIDIA Riva versions up to and including 2.18.0
Description The issue is related to improper access control, which could lead to escalation of privileges, data tampering, denial of service, or information disclosure. A successful exploit of this vulnerability might have significant consequences. The estimated number of potentially affected devices worldwide is not specified. There are reports of real-world incidents where this issue was exploited.
Recommendations For versions up to and including 2.18.0, update to a newer version that addresses the improper access control issue to prevent potential data tampering and escalation risks. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2025-04956
CVE-2025-23242
ZDI-25-145

Affected Products

Nvidia Riva