PT-2025-10898 · Nvidia · Nvidia Riva

Alfredo Oliveira + 1 · Published 2025-03-11 · Updated 2025-04-29 · CVE-2025-23243

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions: NVIDIA Riva (affected versions not specified)

Description: The issue is related to improper access control, which could be exploited to cause data tampering or denial of service.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2025-04957

CVE-2025-23243

ZDI-25-144

Affected Products

Nvidia Riva

References · 19

• https://nvidia.custhelp.com/app/answers/detail/a_id/5625 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-23243 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-23243 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-144 · Security Note
• https://bdu.fstec.ru/vul/2025-04957 · Security Note
• https://twitter.com/fernandokarl/status/1916778968025387481 · Twitter Post
• https://twitter.com/CVETracker/status/1899913470373462051 · Twitter Post
• https://twitter.com/syedaquib77/status/1917295916144288078 · Twitter Post
• https://twitter.com/threatsbank/status/1917218242826809594 · Twitter Post
• https://twitter.com/fletch_ai/status/1917142067849077207 · Twitter Post
• https://twitter.com/TweetThreatNews/status/1901622672267645174 · Twitter Post
• https://twitter.com/CVEnew/status/1899548501358592168 · Twitter Post
• https://twitter.com/TheZDIBugs/status/1900270276472168753 · Twitter Post
• https://twitter.com/gossy_84/status/1917179645457289572 · Twitter Post
• https://twitter.com/TheZDIBugs/status/1900269983629730054 · Twitter Post