Memory Disclosure Vulnerability in NVIDIA GPU Display Driver for Windows and Linux
CVE-2025-23286

4.4MEDIUM

Key Information:

Vendor

Nvidia
Status
Gpu Display Drivers
Vendor
CVE Published:
2 August 2025

What is CVE-2025-23286?

The NVIDIA GPU Display Driver for Windows and Linux has a vulnerability that enables an attacker to read invalid memory spaces. If successfully exploited, this vulnerability may lead to the disclosure of sensitive information from the affected systems, potentially compromising user data and system integrity.

Affected Version(s)

GPU Display Drivers R535, R570, R575

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5670

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-23286 : Memory Disclosure Vulnerability in NVIDIA GPU Display Driver for Windows and Linux