CVE-2025-23347 - Vulnerability Details - OpenCVE

NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Nvidia	Geforce Nvs Project G Assist Quadro Rtx Tesla

No data.

No data.

References

Link	Providers
https://nvd.nist.gov/vuln/detail/CVE-2025-23347
https://nvidia.custhelp.com/app/answers/detail/a_id/5703
https://www.cve.org/CVERecord?id=CVE-2025-23347

History

Fri, 24 Oct 2025 10:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Nvidia Nvidia geforce Nvidia nvs Nvidia project G Assist Nvidia quadro Nvidia rtx Nvidia tesla
Vendors & Products		Nvidia Nvidia geforce Nvidia nvs Nvidia project G Assist Nvidia quadro Nvidia rtx Nvidia tesla

Thu, 23 Oct 2025 19:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Thu, 23 Oct 2025 18:30:00 +0000

Type	Values Removed	Values Added
Description		NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
Weaknesses		CWE-276
References		https://nvd.nist.gov/vuln/detail/CVE-2025-23347 https://nvidia.custhelp.com/app/answers/detail/a_id/5703 https://www.cve.org/CVERecord?id=CVE-2025-23347
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: nvidia

Published: 2025-10-23T18:26:10.963Z

Updated: 2025-10-23T19:00:33.232Z

Reserved: 2025-01-14T01:07:21.737Z

Link: CVE-2025-23347

Vulnrichment

Updated: 2025-10-23T19:00:29.896Z

NVD

Status : Awaiting Analysis

Published: 2025-10-23T19:15:50.250

Modified: 2025-10-27T13:20:15.637

Link: CVE-2025-23347

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-23347", "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "state": "PUBLISHED", "assignerShortName": "nvidia", "dateReserved": "2025-01-14T01:07:21.737Z", "datePublished": "2025-10-23T18:26:10.963Z", "dateUpdated": "2025-10-23T19:00:33.232Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Windows(R580)"], "product": "GeForce", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 581.42"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R580)"], "product": "NVIDIA RTX, Quadro, NVS", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 581.42"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R570)"], "product": "NVIDIA RTX, Quadro, NVS", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 573.76"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R580)"], "product": "Tesla", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 581.42"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows(R570)"], "product": "Tesla", "vendor": "NVIDIA", "versions": [{"status": "affected", "version": "All driver versions prior to 573.76"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": true, "type": "text/html", "value": "NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure."}], "value": "NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure."}], "impacts": [{"descriptions": [{"lang": "en", "value": "Code Execution, Escalation of Privileges, Data Tampering, Information Disclosure, Denial of Service"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-276", "description": "CWE-276 Incorrect Default Permissions", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "shortName": "nvidia", "dateUpdated": "2025-10-23T18:26:31.217Z"}, "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23347"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2025-23347"}, {"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5703"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "NVIDIA PSIRT"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-23T19:00:27.140642Z", "id": "CVE-2025-23347", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-23T19:00:33.232Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-23347", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-10-23T19:00:27.140642Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-23T19:00:29.896Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "impacts": [{"descriptions": [{"lang": "en", "value": "Code Execution, Escalation of Privileges, Data Tampering, Information Disclosure, Denial of Service"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "NVIDIA", "product": "GeForce", "versions": [{"status": "affected", "version": "All driver versions prior to 581.42"}], "platforms": ["Windows(R580)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "NVIDIA RTX, Quadro, NVS", "versions": [{"status": "affected", "version": "All driver versions prior to 581.42"}], "platforms": ["Windows(R580)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "NVIDIA RTX, Quadro, NVS", "versions": [{"status": "affected", "version": "All driver versions prior to 573.76"}], "platforms": ["Windows(R570)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Tesla", "versions": [{"status": "affected", "version": "All driver versions prior to 581.42"}], "platforms": ["Windows(R580)"], "defaultStatus": "unaffected"}, {"vendor": "NVIDIA", "product": "Tesla", "versions": [{"status": "affected", "version": "All driver versions prior to 573.76"}], "platforms": ["Windows(R570)"], "defaultStatus": "unaffected"}], "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23347"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2025-23347"}, {"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5703"}], "x_generator": {"engine": "NVIDIA PSIRT"}, "descriptions": [{"lang": "en", "value": "NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.", "supportingMedia": [{"type": "text/html", "value": "NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.", "base64": true}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-276", "description": "CWE-276 Incorrect Default Permissions"}]}], "providerMetadata": {"orgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "shortName": "nvidia", "dateUpdated": "2025-10-23T18:26:31.217Z"}}}, "cveMetadata": {"cveId": "CVE-2025-23347", "state": "PUBLISHED", "dateUpdated": "2025-10-23T19:00:33.232Z", "dateReserved": "2025-01-14T01:07:21.737Z", "assignerOrgId": "9576f279-3576-44b5-a4af-b9a8644b2de6", "datePublished": "2025-10-23T18:26:10.963Z", "assignerShortName": "nvidia"}, "dataVersion": "5.1"}