PT-2025-31750 · Nvidia+2 · Nvidia-Graphics-Drivers-Tesla-418+7

Published 2025-01-01 · Updated 2025-12-09 · CVE-2025-23286

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions nvidia-graphics-drivers nvidia-graphics-drivers-legacy-390xx nvidia-graphics-drivers-tesla-418 nvidia-graphics-drivers-tesla-470 nvidia-graphics-drivers-tesla-535 nvidia-open-gpu-kernel-modules

Description The NVIDIA GPU Display Driver for Windows and Linux contains an issue that could allow an attacker to read invalid memory. A successful exploit of this issue might lead to information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-09412

CVE-2025-23286

ECHO-31FB-6654-D989

OPENSUSE-SU-2025:15431-1

OPENSUSE-SU-2025:15804-1

SUSE-SU-2025:03062-1

SUSE-SU-2025:03246-1

SUSE-SU-2025:03247-1

SUSE-SU-2025:03424-1

SUSE-SU-2025:20741-1

SUSE-SU-2025:20757-1

SUSE-SU-2025_03062-1

SUSE-SU-2025_03246-1

SUSE-SU-2025_03247-1

SUSE-SU-2025_03424-1

Affected Products

Debian

Suse

Nvidia Graphics Drivers

Nvidia-Graphics-Drivers-Legacy-390Xx

Nvidia-Graphics-Drivers-Tesla-418

Nvidia-Graphics-Drivers-Tesla-470

Nvidia-Graphics-Drivers-Tesla-535

Nvidia-Open-Gpu-Kernel-Modules

References · 54

• https://osv.dev/vulnerability/openSUSE-SU-2025:15431-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03247-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09412 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03062-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15804-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20741-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03424-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-23286 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-23286 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03246-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20757-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-23286 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-23286 · Vendor Advisory
• https://suse.com/support/update/announcement/2025/suse-su-202503246-1 · Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5670 · Note