PT-2026-3639 · Nvidia · Nvidia Nsight Systems

Published 2025-01-01 · Updated 2026-01-23 · CVE-2025-33231

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Nsight Systems for Windows (affected versions not specified)

Description The application has a flaw in how it loads DLLs, specifically related to insecure DLL search paths. This could allow an attacker to manipulate the search path, potentially leading to code execution, privilege escalation, data modification, denial of service, and information disclosure. The issue involves an uncontrolled search path element.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

DoS

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

BDU:2026-00698

CVE-2025-33231

Affected Products

Nvidia Nsight Systems

References · 11

• https://bdu.fstec.ru/vul/2026-00698 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-33231 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-33231 · Vendor Advisory
• https://nvidia.custhelp.com/app/answers/detail/a_id/5755 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-33231 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-33231 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-33231 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-33231 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-33231 · Security Note
• https://twitter.com/CVEnew/status/2013683556522877405 · Twitter Post
• https://twitter.com/OstorlabSec/status/2014745970047684881 · Twitter Post