PT-2025-41532 · Nvidia+1 · Nvidia Gpu Display Driver+1

Daniel Rhea · Published 2025-10-09 · Updated 2025-11-13 · CVE-2025-23309

Positive Technologies · (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Display Driver (affected versions not specified)

Description The NVIDIA Display Driver contains a flaw where an uncontrolled DLL loading path can be exploited. This could lead to arbitrary denial of service, escalation of privileges, code execution, and data tampering. The issue involves the potential to hijack DLLs, allowing attackers to load malicious code with elevated privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

RCE

DoS

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

BDU:2025-14390

CVE-2025-23309

Affected Products

Nvidia Gpu Display Driver

Red Os

References · 12

• https://cve.org/CVERecord?id=CVE-2025-23309 · Security Note
• https://bdu.fstec.ru/vul/2025-14390 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-23309 · Security Note
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://twitter.com/CveTodo/status/1976716967730905408 · Twitter Post
• https://twitter.com/CVEnew/status/1976714759803179393 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1976477634214424581 · Twitter Post
• https://twitter.com/ZeroPathLabs/status/1976729136212140203 · Twitter Post
• https://nvidia.custhelp.com/app/answers/detail/a_id/5703 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-nvidia-drivers-cve-2025-23309-cve-2025-23280-cve-2025-23282 · Note
• https://twitter.com/VulmonFeeds/status/1976822264881352772 · Twitter Post
• https://t.me/CVEtracker/34611 · Telegram Post