Improper Index Validation in NVIDIA Display Driver for Windows and Linux
CVE-2025-23278

7.1HIGH

Key Information:

Vendor

Nvidia
Status
Gpu Display Drivers
Vendor
CVE Published:
2 August 2025

What is CVE-2025-23278?

The NVIDIA Display Driver for Windows and Linux includes a vulnerability where attackers may exploit improper index validation by sending specially crafted parameters. Exploitation of this vulnerability could potentially lead to data corruption or cause system unavailability, impacting users' access to graphical resources.

Affected Version(s)

GPU Display Drivers R575

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5670

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-23278 : Improper Index Validation in NVIDIA Display Driver for Windows and Linux