PT-2025-41532 · Nvidia · Nvidia Gpu Display Driver

Daniel Rhea · Published 2025-10-10 · Updated 2025-10-11 · CVE-2025-23309

Positive Technologies · (AI Summary)

CVSS v3.1

8.2

8.2

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Display Driver (affected versions not specified)

Description The NVIDIA Display Driver contains a flaw where an uncontrolled DLL loading path can be exploited. This could lead to arbitrary denial of service, escalation of privileges, code execution, and data tampering. The issue involves the potential to hijack DLLs, allowing attackers to load malicious code with elevated privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

LPE

RCE

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-23309

Affected Products

Nvidia Gpu Display Driver

References · 9

• https://cve.org/CVERecord?id=CVE-2025-23309 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-23309 · Security Note
• https://twitter.com/VulmonFeeds/status/1976822264881352772 · Twitter Post
• https://nvidia.custhelp.com/app/answers/detail/a_id/5703 · Note
• https://twitter.com/ZeroPathLabs/status/1976729136212140203 · Twitter Post
• https://t.me/CVEtracker/34611 · Telegram Post
• https://twitter.com/CveTodo/status/1976716967730905408 · Twitter Post
• https://twitter.com/CVEnew/status/1976714759803179393 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1976477634214424581 · Twitter Post